macOS High Sierra Automatically Performs Security Check on EFI Firmware Each Week

[jblagden]

So all it does is send the data? No removal action?

The vast majority of people who see that pop up won’t think that their Mac has potentially been compromised - they’ll be thinking there’s a software or hardware error.

So far, there's no removal action, but that could be instituted at some point in the future. It's funny, I was concerned about Apple suing Hackintoshers, but now I know they won't litigate. Instead, they'll just deactivate all of the Hackintoshes.
[doublepost=1506355949][/doublepost]I think this kind of feature will be the death knell for the Hackintosh community. The time to leave MacOS is soon upon us.

 

[Pike R. Alpha]

Is this going to affect flashed Mac Pros in any way ?

No. You can find the complete allow list at:

/usr/libexec/firmwarecheckers/eficheck/EFIAllowListShipping.bundle/allowlists

@Concerned_hackintoshers,

This has nothing to do with Apple trying to stop people from using a hackintosh!

See also: https://pikeralpha.wordpress.com/20...p-a-bios-region-of-your-ami-and-phoenix-bios/

 

[jblagden]

@Concerned_hackintoshers,

This has nothing to do with Apple trying to stop people from using a hackintosh!

So far. But just wait.

 

[Cougarcat]

So far. But just wait.

People said that when SIP was introduced. The hackintosh community isn’t significant enough for Apple to specifically target, though they will continue to make steps like this to make real Macs more secure.

 

[jblagden]

People said that when SIP was introduced. The hackintosh community isn’t significant enough for Apple to specifically target, though they will continue to make steps like this to make real Macs more secure.

The Hackintosh community isn't big enough yet, but one day it may be. On that day, Apple will hit the button that deactivates all Hackintoshes. In the meantime, this new software tool checks to see if you have a valid EFI and sends the data back home to Apple. Even if the sending of data is voluntary, Apple might just assume that any computer not sending back data is a Hackintosh. If not, they might eventually make the data sending mandatory and move it behind the scenes.

Windows and Linux developers won't do that because they have nothing to gain, much like when Apple disabled TRIM for third-party SSDs. Apple on the other hand, does have something to gain - getting people to buy more legitimate Macs.

 

[Guy Clark]

This sounds like a way to get rid of Hackintoshes.

Flying in the face of Consumer Freedom of those who choose to run macOS on non Mac Hardware.

Apple should have made macOS (OS X) publicly available years ago.

 

[jblagden]

Flying in the face of Consumer Freedom of those who choose to run macOS on non Mac Hardware.

Apple should have made macOS (OS X) publicly available years ago.

1. Are you being facetious?
2. I'm not a Hackintosher. I also wouldn't want to make one due to the work involved. What I really want is for Apple to go back to making machines which can be upgraded and repaired.
2b. Since they won't do that, I'm moving on to Linux.

 

[Guy Clark]

Are you being facetious?

No just think of it.

Making macOS publicly available would generate considerable revenue. There would be many more running the macOS platform if the expense of the Hardware were taken out of the equation.

I am not suggesting Apple give macOS away as many would happily pay $100-$200 dollars for the license to use it.

 

[JosephAW]

Translation = Shut down Hackintosh computers

 

[jblagden]

No just think of it.

Making macOS publicly available would generate considerable revenue. There would be many more running the macOS platform if the expense of the Hardware were taken out of the equation.

I am not suggesting Apple give macOS away as many would happily pay $100-$200 dollars for the license to use it.

That's what I've been saying for two years!

 

[Cougarcat]

Translation = Shut down Hackintosh computers

...nobody is reading this thread. This doesn’t do anything to hackintoshes.

No just think of it.

Making macOS publicly available would generate considerable revenue. There would be many more running the macOS platform if the expense of the Hardware were taken out of the equation.

I am not suggesting Apple give macOS away as many would happily pay $100-$200 dollars for the license to use it.

They would also have to support it and make sure it works out of the box on whatever hardware. Not going to happen.

 

[nt5672]

1. Are you being facetious?
2. I'm not a Hackintosher. I also wouldn't want to make one due to the work involved. What I really want is for Apple to go back to making machines which can be upgraded and repaired.
2b. Since they won't do that, I'm moving on to Linux.

This is really the crux of the matter. If Apple made Macs for the rest of us, there would not be a need for a hackintosh community.
[doublepost=1506359345][/doublepost]

No just think of it.

Making macOS publicly available would generate considerable revenue. There would be many more running the macOS platform if the expense of the Hardware were taken out of the equation.

I am not suggesting Apple give macOS away as many would happily pay $100-$200 dollars for the license to use it.

But then you would complain because it does not work on every piece of **** hardware. In the end Apple would not make any money because the support costs would be out of this world.

 

[Guy Clark]

...nobody is reading this thread. This doesn’t do anything to hackintoshes.


They would also have to support it and make sure it works out of the box on whatever hardware. Not going to happen.

I am quite certain if the Apple Developers were to put their heads together for out of the box compatibility it should be relatively straightforward.
Linux Mint works out of the box on a whole host of hardware and the developers are spread far and wide throughout the world.

 

[jblagden]

This is really the crux of the matter. If Apple made Macs for the rest of us, there would not be a need for a hackintosh community.

Exactly! Many Hackintoshes exist due to Apple's refusal to make make Macs which can be upgraded or repaired, which started around 2013. If Apple made Macs which met those two criteria, the Hackintosh community would probably be a lot smaller.

 

[Guy Clark]

This is really the crux of the matter. If Apple made Macs for the rest of us, there would not be a need for a hackintosh community.
[doublepost=1506359345][/doublepost]

But then you would complain because it does not work on every piece of **** hardware. In the end Apple would not make any money because the support costs would be out of this world.

No just they would need to lay down clear system requirements. Or PCs and Laptops could be purchased pre approved to run macOS for a fraction of the cost of an actual Mac.

 

[leman]

Exactly! That's precisely what I would be worried about - well, if I had a Hackintosh. If Apple is willing to go as far as checking for a legitimate EFI, they may very well be willing to kill Hackintoshes to try to increase sales of legitimate Macs. Though, if they go that far, I think most Hackintoshers will go to Linux.

You know, years ago when Apple changed the visual style of the scrollbars, people started crying "omg, Apple is dumbing down the Mac and merging it with the iOS!". Still didn't happen. When they released the App Store on Mac, people started crying "omg, Apple is dumbing down the Mac and merging it with the iOS!". Still didn't happen. When they introduced default code signature checking (which is easily circumvented by the user btw), people started, well you know. Every convenience or security feature (like rootless, which has to be one of my favourite features as heavy command line user) has been interpreted as a way to "dumb down" or "lock down" the Mac. And yet, its still very far from being locked down (actually, its arguably more open then ever).

Checking the EFI is a very reasonable safety measure, in face of a very real threat. With exposed PCI-e on every computers, firmware hacks are not theoretical anymore. Doubt that Apple even things about Hackintosh in this context. Don't interpret too much into this.

 

[Cougarcat]

Exactly! Many Hackintoshes exist due to Apple's refusal to make make Macs which can be upgraded or repaired, which started around 2013. If Apple made Macs which met those two criteria, the Hackintosh community would probably be a lot smaller.

Cost is another factor which Apple will never address. Next year’s Mac Pro will have at least upgradability, but it’ll cost a fortune and I doubt it will make any dent in the popularity of hackintoshes.

 

[Vjosullivan]

Can anyone explain what the vulnerability is that is so great that every Mac in the world now has to report back to Apple weekly. Does anyone know the rate at which problems are occurring currently, that this process would have eliminated if it was in place already?

 

[jblagden]

No just they would need to lay down clear system requirements. Or PCs and Laptops could be purchased pre approved to run macOS for a fraction of the cost of an actual Mac.

I've compared prices, and with the exception of everything being soldered-in, Macs are mostly on part with PCs as regards pricing (except upgrades). The real problem is that new Macs can't get upgrades or repairs. PCs on the other hand, often can be repaired and upgraded. And let's not forget ports. Apple's total switch of its laptop lines to having only USB-C ports is another reason why Apple's new Macs are not for everyone.

 

[Guy Clark]

Cost is another factor which Apple will never address. Next year’s Mac Pro will have at least upgradability, but it’ll cost a fortune and I doubt it will make any dent in the popularity of hackintoshes.

Oh come on Apple could easily afford it. The cost to them would be loose change.

 

[Vjosullivan]

Checking the EFI is a very reasonable safety measure, in face of a very real threat.

What threat exactly?

 

[Guy Clark]

The more pressing question is.

Is there a way to disable it?

 

[Vjosullivan]

Thats what we love about Apple
Silently providing us goodies that other platform users can just dream of

Every Mac in the world reporting its status and location back to Apple, weekly? That's one goodie I could probably live without.

 

[Cougarcat]

Oh come on Apple could easily afford it. The cost to them would be loose change.

I think you misunderstood me. I meant cost to the user. People make hackintoshes because the price/performance is superior, and Apple for whatever reason is never going to address that.

 

[Guy Clark]

I think you misunderstood me. I meant cost to the user. People make hackintoshes because the price/performance is superior, and Apple for whatever reason is never going to address that.

Apple could easily charge more for macOS than Microsoft charge for Windows 10 as macOS is far superior and matured platform that has undergone many years of development whilst there has been little change in the GUI. Run OS X 10.4 Tiger alongside macOS High Sierra and the similarities are plain to see.
Apple have had no train wrecks as Microsoft did with Windows 8 as the macOS (OS X) interface has remained constant.

Equipment does not necessarily need to be costly to run macOS that is merely a myth.