Slashdot Mirror
Apple Confirms Its T2 Security Chip Blocks Some Third-Party Repairs of New Macs (theverge.com)
An anonymous reader shares a report from The Verge about Apple's new security-focused T2 chip found in the newest Mac computers. The introduction of the chip "has renewed concerns that Apple is trying to further lock down its devices from third-party repair services," The Verge reports. From the report: The T2 is "a guillotine that [Apple is] holding over" product owners, iFixit CEO Kyle Wiens told The Verge over email. That's because it's the key to locking down Mac products by only allowing select replacement parts into the machine when they've come from an authorized source -- a process that the T2 chip now checks for during post-repair reboot. "It's very possible the goal is to exert more control over who can perform repairs by limiting access to parts," Wiens said. "This could be an attempt to grab more market share from the independent repair providers. Or it could be a threat to keep their authorized network in line. We just don't know." Apple confirmed to The Verge that this is the case for repairs involving certain components on newer Macs, like the logic board and Touch ID sensor, which is the first time the company has publicly acknowledged the tool's use. But Apple could not provide a list of repairs that required this or what devices were affected. It also couldn't say whether it began this protocol with the iMac Pro's introduction last year or if it's a new policy instituted recently.
First revealed last month by MacRumors and Motherboard, both of which got their hands on an internal Apple document, the T2 chip could render a computer inoperable if, say, the logic board is replaced, unless the chip recognizes a special piece of diagnostic software has been run. That means if you wanted to repair certain key parts of your MacBook, iMac, or Mac mini, you would need to go to an official Apple Store or a repair shop that's part of the company's Authorized Service Provider (ASP) network. If you want to repair or rebuild portions of those devices on your own, you simply can't -- at least, according to this document. The parts affected, according to the document, are the display assembly, logic board, top case, and Touch ID board for the MacBook Pro, and the logic board and flash storage on the iMac Pro. It is also likely that logic board repairs on the new MacBook Air and Mac mini are affected, as well as the Mac mini's flash storage. Yet, the document, which is believed to have been distributed earlier this year, does not mention those products because they were unannounced at the time. Regardless, to replace those parts, a technician would need to run what's known as the AST 2 System Configuration suite, which Apple only distributes to Apple Stores and certified ASPs. So DIY shops and those out of the Apple network would be out of luck.
First revealed last month by MacRumors and Motherboard, both of which got their hands on an internal Apple document, the T2 chip could render a computer inoperable if, say, the logic board is replaced, unless the chip recognizes a special piece of diagnostic software has been run. That means if you wanted to repair certain key parts of your MacBook, iMac, or Mac mini, you would need to go to an official Apple Store or a repair shop that's part of the company's Authorized Service Provider (ASP) network. If you want to repair or rebuild portions of those devices on your own, you simply can't -- at least, according to this document. The parts affected, according to the document, are the display assembly, logic board, top case, and Touch ID board for the MacBook Pro, and the logic board and flash storage on the iMac Pro. It is also likely that logic board repairs on the new MacBook Air and Mac mini are affected, as well as the Mac mini's flash storage. Yet, the document, which is believed to have been distributed earlier this year, does not mention those products because they were unannounced at the time. Regardless, to replace those parts, a technician would need to run what's known as the AST 2 System Configuration suite, which Apple only distributes to Apple Stores and certified ASPs. So DIY shops and those out of the Apple network would be out of luck.
Stop with the T2 articles, shit
I've often seen "secure enclave" spelled as "secure enslave." Now I know that wasn't a typo.
Anyway, I'd have no problem with something like a boot warning of unauthorized repairs, but prohibiting owners from fixing their own fucking equipment stinks. Especially since there are parts of the world that can be a thousand miles and in a different country from the nearest Apple store.
Sad how far Apple has fallen from being a company founded by hackers and geeks.
What about people who bought Apple in countries without Apple stores, thinking they could get a local shop to repair the products, as has been done for the past 20-30 years. Nah, fuck Apple and Tim Cook for throwing product owners under a speeding bus.
So, you might go to a third party repair shop that winds up (innocently or maliciously) installing a replacement component that was built in China and has a spy chip in it that sends your data back to the Chinese government.....and this chip can help block it.
On the other hand, such a requirement produces lock-in which keeps your prices high and prevents open competition for services, which is bad for you and the market.
And anyway the trust issue is kind of moot because Apple might be inserting their own spy chips and hacking us all.
It really isn't possible to win.
"...the T2 chip could render a computer inoperable..." and it went on from there. The hinge of this whole story rests on a "could". Twist the hinge one way, there is no story, the other way, and ... well ... you get this flame bait
You know, stuff that matters.
- real hackers don't have sigs -
Can't wait for "Apple T3: Rise of the Machinations" and "Apple Sustentation"
It must have been something you assimilated. . . .
Having gone through the age of build-it-yourself computers, all I can say is WHO CARES??? I don't remember the last time I opened any of my old computers to change anything. All I see here is Windows people complaining about Apple computers they'd never even buy. PHHHHIIITT!!
I 100% understand the "but we cannot repair it" factor.
I also very much like they "they cannot hack it factor" too ... and yes, for specific devices until there is a method to keep the "feds" out, this to me an acceptable means of securing a device: no "skimmers" inserted into the print reader, no rogue devices onboarded elsewhere, and hopefully the memory/storage are protected to where they cannot be simply slipped onto another device for reading/decrypting too. (Sad, but this is how little I trust.)
Sort of what Apple has always pushed for and if you don't like it, don't buy Apple products. They have always been a bit snobbish about their stuff. Obviously people don't remember the Power PC chip era for Apple, talk about locked down hardware.
My next laptop is not going to be a mac any more. I need unixy behaviour, so a mac was fine. I like using my 2013 mac book pro. But being locked out of third party repair is a major detractment. So my next laptop will be a PC laptop running Linux.
I should use this sig to advertise my book ISBN-13 : 978-1501515132.
The hardware quality advantage of MacBooks is long gone. OS X has become a pile of iCloud infested junk. There is simply no reason to buy an Apple product anymore. They've abandoned the power user and no longer innovate. The only thing they can do is build lock-in devices to try to keep customers on their stagnant technology.
I was using Mac laptops since the PowerPC days. I finally gave up and built myself a Linux laptop. Do I miss a few OS X specific apps? Yes. Am I glad to be off Apple's lock-in ecosystem: Hell yes. Even though I had backups I wanted to get the last day's work off my dead MacBook pro. Not so easy when the SSD is soldered to the motherboard. Thanks Apple for starting that trend.
This sounds like all the fears of Palladium come true.
Where I live, there isn't a repair shop within 100 miles, here in northeast Arkansas. I could never recommend a Mac to anyone I know, even someone heavily invested in the Apple ecosystem, because of this. It's the same story with their phones. Both of my parents have iPhones, and without an authorized repair shop anywhere nearby, not even within a 100 mile radius, I can't get them fixed without shipping them off somewhere, and being without the device for God knows how long. Meanwhile, there's an independent repair shop that will happily repair my Android phone same day within 10 miles.
Simple fact is, computers break eventually. Nothing runs forever. Apple's insistence that we use their repair shops, which for me might as well be on the moon, is just crazy. If you can't get the thing fixed when something goes wrong, be it a cracked screen or bad keyboard or whatever, it's just disposable. And Apple products are just too expensive to be disposable.
This violates Federal Law, in particular the Magnussen-Moss Act (15 USC 2302(c)) requirement that says warrantors cannot require that only branded parts be used with the product in order to retain the warranty.
"My opinions are my own, and I've got *lots* of them!"
Looks like you can still replace that. Looks like Apple messed up there.
Just think of this with tim cooks face and the word NON APPLE HARDWARE no mac os for you.
https://giphy.com/gifs/no-jura...
Welcome to John Deere (dealer only service)
Now will the EU or Australia do something?
Just another reason to buy elsewhere. Apple was never great at debugging but it's progressed to downright awful. Any luck with that overheating wireless charger?
When all you have is a hammer, every problem starts to look like a thumb.
not one controlled mainstream media outlet carries the story.
You're full of crap.
When all you have is a hammer, every problem starts to look like a thumb.
every had a cart that wouldn't play? Ever blow on the cart? That didn't help. What _would_ help is cutting the pin to the lockout chip to by pass Nintendo's DRM. See, what was happening is that not all the pins were making good contact, but most of the time you didn't _need_ perfect contact, except for that darn lockout chip. That thing was sensitive. It had to be or it'd be easy to bypass.
I don't want DRM in my products because not only does it mean the device isn't really mine but it means I've got one more thing to break and when it does it'll likely kill the device completely.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
When they call the motherboard "logic board".
That T2 chip seems to have a strange effect on my Credit Card anytime I try to purchase an Apple product with such hardware installed.
Guess I'll have to go buy something else . . . . . .
The odds of someone that has the slightest idea what they are doing also buying a Mac seems very remote.
For the old people and tech-ignorant that buy these devices, it won't make the slightest difference.
This will only prevent 3rd party shops from working on Apple hardware.
Let the fools and their money part.
After they where hiding the iGPU from my 15" late-2013 rMBP: https://www.youtube.com/watch?... us another proprietary SSD connector every model year (well when they actually updated something): https://www.youtube.com/watch?... and literally each and every MacBook MacSafe charger has blown up and failed on me in the meantime: https://www.youtube.com/watch?... I'm out of purchasing new Apple hardware. Thanks god I maintain my #t2sde Linux (https://t2sde.org) and can just switch to amazing AMD ThinkPads ;-) https://www.youtube.com/watch?...
I know, Inknow, we all need a dream. I mean, how many times can you tell your âpartnerâ(TM) that her jeans donâ(TM)t make her ass look big?
And they totally donâ(TM)t. Itâ(TM)s her ass that makes her ass look big, amirite?
Awww yeah, you know what time it is ... high five up top!
So, yeah, I donâ(TM)t blame you. Iâ(TM)d be all âoefuck fuck fuckity fuck motherfucker âoe too.
Just make sure you clean your piss off the toilet seat this time. You donâ(TM)t want a repeat of last weekend do you?
Of course you donâ(TM)t.
(No really, go clean the toilet before she gets home. You can swing your dick online later)
donâ(TM)t worry, just tell them that you had a Twinkie for lunch. Fine, a case of Twinkies.
You made Lil Kim look like an amateur, though.
Iâ(TM)m sure Apple will richly reward you for your loyalty. No, really, any day now they totally are going to be all like âYo thanks dawg, hereâ(TM)s a free Mac Pro!â(TM)
Any day now. Just wait, youâ(TM)ll see.
I mean it.
Just wait.
forget about the poor 3rd party repair services, this is about you, the customer.
the T2 chip is pure evil, it prevents to use of other OS's, it prevents self-repair (or any repair not by apple).
this is all about locking the customer.
ofcourse, Apple customers probably don't even care.
On a long enough timeline, the survival rate for everyone drops to zero.
Changed your meds again, eh?
Admit nothing. Deny Everything. Make Counter-accusations.
I stopped buying Sony equipment when they started putting viruses on their DVD's. You've all bitched and moaned to Apple, and in response, they spit on you and called you suckers. WALK AWAY! Spend your money elsewhere.
There's one way to correct this. Hit Apple where it counts, in the pocketbook. I did. I was tired of the hobbled IOMMU in my late 2013 MacPro Desktop.
I replaced it with a Haydes NUC Canyon. It is fast! I've got Bionic Beaver running, I built a hackintosh using an AMD eGPU (the onboard VEGA Mwasn't supported yet) Installed the egpu Wrangler hack and popped my GTX970 in my Akitio Node (Replaced the low end AMD GPU card that I initially used for the hackintosh build). Now I have Linux, MacOS, and Windows running bare metal on my Haydes Canton NUC.
As far as the IOMMU.. Virt on Linux runs well! eGPU passthrough works!
Don't buy a new Apple products... lots of maggots inside!
I'm just about ready to sell the macpro tin can. no more apple products for me
We're probably going to buy the Mac mini i5 anyway, to replace my wife's 2008 iMac, with a game plan to run it into the ground for another eight to ten years.
Personally, I don't see the repairability problem. Unless we go crazy writing to the internal storage (unlikely), there's very little to break on this system. Everything but two memory sticks is soldered down. The vast majority of peripherals are tangled up a giant dongle mess behind the cute little box. Those will break and can be unplugged.
Apart from failed DRAM, the smallest possible electronics repair is to swap the main logic board. (The most likely repair is not electronics: it's the power supply and fan, neither of which are protected by the T2 chip, unless Apple is far more Big Brother than anyone back in 1984 even began to imagine.)
I will likely confirm before purchase that it remains possible to install Windows 10 though Boot Camp on an external drive (just an actual TB3 drive would be acceptable as a fail safe; but far better if USB drive were also allowed).
I would be extremely surprised if such a minimalistic system board had more than a 5% failure rate over ten years (unless Apple has completely screwed the cooling envelope, and if there's anything Apple knows, it's confining warm things in tight places, all the while making your think it's your warm thing, in your tight place of choice).
So we'll just self-insure on the books to replace this box if it fails with any damn thing at hand. And we'll keep layers of hot backups on the nearby NAS box. That means we basically won't ever buy any macOS-specific software we can't afford to lose at the first Apple glitch.
It seriously sucks that the world has come to this, but we're going to temporise for one more long product generation. We both hate Windows 10. Every other machine in the house is BSD or Linux. My Android phone doesn't even have its data modem enabled (I can't stand the Android security model), so it's exclusively used for phone calls, text messages, and accessing my personal web server on the internal Wi-Fi. My wife's phone is a recent iPhone from her place of employment, which she only uses for text messages to me and a few other people, and for real work.
It's nice to have one machine in the place compatible with recent, mainstream things. It makes her place of employment happy when she teleworks from a platform they've ever heard of before. That's why she has an iMac in the first place.
1984 Apple's Macintosh Commercial
The T2 is that chick with the hammer. What's she's smashing is any narrative at all you can understand—to be replaced by the blinding wall of dazzling white light of Apple arrogance.
I fudged the date a little, but why not Remembrance day, for good measure? Because I remember the 1984 advertisement (as a scary harbinger), and I always will.
Who can watch that old commercial now, and not read it as foretelling a dark future?