New TouchBar enabled MacBook Pro's contain iOSBoot module in firmware

[M2M]

I found this when playing around with the Firmware of the new TouchBar MBP's (MBP132_0223_B00_LOCKED.fd, MBP133_0223_B00_LOCKED.fd)

The module "iOSBoot" is only present in the new TouchBar enabled MBP's but not in the new MBP without TouchBar (MBP131_0205_B02_LOCKED.fd). Also I did not find it in earlier MBP firmwares. This might be related to the TouchBar running a stiped down WatchOS version.... or maybe something else.

You can use UEFITool to play around with the firmwares yourself.

 

[deadworlds]

Interesting. How did you get access to the touch bar firmware?

 

[killawat]

Interesting. How did you get access to the touch bar firmware?

This.

 

[M2M]

Its not in the touch bar firmware, but part of the firmware of the MacBook Pro itselft.
To get the MacBook Pro firmware do as follows:

1. Download macOS Sierra Build 16B2657 (the current one) from the appStore
2. Right-click on it and select Show Package Content
3. Open InstallESD.dmg in Contents -> SharedSupport
4. Go to Packages -> EFIPayloads
5. Copy MBP131_0205_B02_LOCKED.fd (for the MacBookPro13,1 - no TouchBar), MBP132_0223_B00_LOCKED.fd (for the MacBookPro13,2 - with TouchBar) and MBP133_0223_B00_LOCKED.fd (for the MacBookPro13,3 - with TouchBar) to somewhere on your machine

 

[deadworlds]

Its not in the touch bar firmware, but part of the firmware of the MacBook Pro itselft.
To get the MacBook Pro firmware do as follows:

1. Download macOS Sierra Build 16B2657 (the current one) from the appStore
2. Right-click on it and select Show Package Content
3. Open InstallESD.dmg in Contents -> SharedSupport
4. Go to Packages -> EFIPayloads
5. Copy MBP131_0205_B02_LOCKED.fd (for the MacBookPro13,1 - no TouchBar), MBP132_0223_B00_LOCKED.fd (for the MacBookPro13,2 - with TouchBar) and MBP133_0223_B00_LOCKED.fd (for the MacBookPro13,3 - with TouchBar) to somewhere on your machine

Okay this makes sense. Interesting find.

 

[happyslayer]

The Touch Bar is apparently running a modified WatchOS. Isn't WatchOS a subset of iOS? Would that explain it? Honest question; I'm not very knowledgeable about the firmware details

 

[macintoshmac]

Honest question; I'm not very knowledgeable about the firmware details

Don't be scared; people here won't gobble you down unless you get too enamoured with Apple or get obviously Anti-Apple.

 

[jjlannoo]

Makes sense since its running a version of watchOS. I think its independent as well so people shouldn't worry about it locking if a program does. tho I suppose it could lock up itself. lol.

 

[maratus]

Yeah, touchbar and touchID sensor are partially OS-independent and have some nice dedicated hardware like the T1 processor and watchOS itself. It may glitch too, however, just like Apple Watch or iOS devices. I'm looking forward to all the fun with touchbar going crazy

 

[jjlannoo]

Yeah, touchbar and touchID sensor are partially OS-independent and have some nice dedicated hardware like the T1 processor and watchOS itself. It may glitch too, however, just like Apple Watch or iOS devices. I'm looking forward to all the fun with touchbar going crazy

I am too! Cant wait for it to get here. Tired of the negativity. Makes me grouchy!

 

[M2M]

Yeah, touchbar and touchID sensor are partially OS-independent and have some nice dedicated hardware like the T1 processor and watchOS itself. It may glitch too, however, just like Apple Watch or iOS devices. I'm looking forward to all the fun with touchbar going crazy

Then the questions also is: When will there be a touchbar jailbreak ?

 

[maratus]

Then the questions also is: When will there be a touchbar jailbreak ?

Soon....

 

[SSD-GUY]

Soon....

Moar B1ue screens 0f death!

 

[idunn]

As I understand this—or maybe not at all—the new Touch Bar MBPs will be running Mac OS and some version of the Watch OS, or basically iOS.

With the two communicating to some extent, obviously. And as well the Touch Bar used for such things as Apple Pay and a thumbprint sensor as password.

Would this not expose one's MBP to many of the vulnerabilities to malware, etc. which iOS may be subject?

 

[M2M]

As I understand this—or maybe not at all—the new Touch Bar MBPs will be running Mac OS and some version of the Watch OS, or basically iOS.

With the two communicating to some extent, obviously. And as well the Touch Bar used for such things as Apple Pay and a thumbprint sensor as password.

Would this not expose one's MBP to many of the vulnerabilities to malware, etc. which iOS may be subject?

There would not be additional vulnerabilities for mostly 2 reasons:

1) only the touch bar would be vulnerable to iOS related malware, but not directly as a malware would still have to 'customized' for a touchbar to work. Think of it similar to an Apple TV, which runs also a certain version of iOS, but is not 'automatically' affected by an iPhone related malware.

2) Mac OS itself as nowadays already similar enough to iOS, that in fact attack vectors are very very close to each other (for ex due to similar libs in both OSs). Still a iOS malware must also be customized to run on macOS (at least due to different CPU instruction sets - ARM vs Intel)

That's also why security updates nowadays for macOS and iOS (and TVOS) are released nearly during the same time.

So to sum it up: the touchbar doesn't Mac your Mac less secure - it stays at the same level rather.

 

[protoxx]

1) only the touch bar would be vulnerable to iOS related malware, but not directly as a malware would still have to 'customized' for a touchbar to work. Think of it similar to an Apple TV, which runs also a certain version of iOS, but is not 'automatically' affected by an iPhone related malware.

Makes me wonder how long until someone figures out the security and we get scrolling X10 adds on the touch bar.

 

[Macalway]

So i'm getting a watch after all. Oh joy

 

[protoxx]

Wonder if the WatchOS 3 or 4 release will include a MacOS terminal emulator?

 

[Macalway]

OFF TOPIC:

Maybe it would be cool if the Watch could do stuff with this bar? Use the Watch as a trackpad?

Man, that's an idea. Or.... reflect what's on the Bar. This might actually make that stupid watch useful (sorry )

 

[maratus]

Moar B1ue screens 0f death!

This is not a blue screen of death.

THIS.. IS.. NORTON..

can't wait for Mac OS Norton, built in split screen mode and native compatibility with touch bar . comes with LHX and F-19 flight simulators and ability to run Windows 95 via bootcamp