Macbook M1 bypass FMM / EFI Unlock

[genhack]

Re: Macbook M1 bypass FMM / EFI Unlock

hey @Mario1241 pongoOs can be booted on m1 but is useless. if you can't pwn m1 processor (like t2). On m1 we need to understand if 1TR or recovery, when locked can boot other os, and if yes what we can mount without aes engine. if you have another mac i can send you a ways for boot linux and check what we can do. Just a remember we need a full patch or mobileactivationd and a dump of t2 macbook bypassed with minacriss can be the key.

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

Hi. maybe someone knows from the diagnostics section (where safari is available) you can somehow start the terminal? or perhaps there is another way to enable the terminal?

it can't be done

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

Hello, does anyone know how to use or how to install PongoOS?

https://github.com/checkra1n/pongoOS

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

Hello friends, I like research and I found this article, I would like that we could do something. The documentation tells us about the bases of s.o. from mac It has occurred to me to be able to modify the IPSW files of version 11 of mac. Someone is a genius in this that can help us I have the idea that we can change to later make a DFU, but I need to modify the DMG files.

https://github.com/vmlemon/understan...OS-Archaeology

Who is an expert in IPSW modifications? Whoever contact me I have the idea but I'm not an expert. Hopefully what I have in mind can work.

[777monah777]

Re: Macbook M1 bypass FMM / EFI Unlock

Hi. maybe someone knows from the diagnostics section (where safari is available) you can somehow start the terminal? or perhaps there is another way to enable the terminal?

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

That 'method' in the video is just little-known Apple IT stuff that's been online for years. (shift control option command right period)
You're entering recoverydiagnose for debugging.
Fun to play with, but not exactly secret.

https://derflounder.wordpress.com/20...acos-recovery/

It didn't help me at all because it has icloud, I was reading about os bridges but it only works with M1 with T2

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

I want to take advantage of the time and I invoke all the connoisseurs. I have 2 m1 teams, one locked and the other unlocked, that I can do so that I can test what options we have that we can do. I am very interested in knowing how to unlock them.

[SMDFlea]

Re: Macbook M1 bypass FMM / EFI Unlock

a thousand apologies I had no idea that it was prohibited I will not do it again.

No problem you were only trying to help.

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

Do not post links to videos when the user is offering paid services.The user in question was banned from here for his bullshit.Don`t post it again.

a thousand apologies I had no idea that it was prohibited I will not do it again.

[VHS]

Re: Macbook M1 bypass FMM / EFI Unlock

Hello, a day ago I found a video where they indicate that it can already be unlocked, if someone knows how we can do it, share it with them.

That 'method' in the video is just little-known Apple IT stuff that's been online for years. (shift control option command right period)
You're entering recoverydiagnose for debugging.
Fun to play with, but not exactly secret.

https://derflounder.wordpress.com/20...acos-recovery/

[SMDFlea]

Re: Macbook M1 bypass FMM / EFI Unlock

Hello, a day ago I found a video where they indicate that it can already be unlocked, if someone knows how we can do it, share it with them.

Do not post links to videos when the user is offering paid services.The user in question was banned from here for his bullshit.Don`t post it again.

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

Hello, a day ago I found a video where they indicate that it can already be unlocked, if someone knows how we can do it, share it with them.

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

One way for bypass M1 will be patching ipsw file, eg. UniversalMac_11.0.1_20B29_Restore.ipsw\022-10604-034\3_Apple_APFS

KRAActivationAuthViewController



Similar work has been successfully performed for iphone:

1. Download the iPSW file you need from the official website: IPSW.
2. Secondly, convert the iPSW file into a ZIP file by changing the extension and extract it.
3. Now open the extracted file folder, and you will see 3 different .dmg files in there.
4. Look for the biggest file and drag it to your desktop. You will notice that the .dmg files will not be able to open in one click. It's because these files are encrypted.
5. You would need a firmware key to open this file. For this purpose, direct to “The iPhone WiKi” and find your firmware key.
6. Once you have the key, it's time to use ???iDecrypt that is already on your Mac. Simply launch the software and open your .dmg file with it.
7. You will see a warning message on your screen. Simply click on the “OK” button and select your output folder and paste your key for “RootFilesystem."
8. Now, you need to click on “Decrypt DMG," and when the process is finished, you will see a success message.
9. Open the iPSW file that is decrypted and go to the Applications folder. Here, you need to delete the “Setup” file.
10. Then, exit this folder and right-click on your decrypted file and click on “Eject."
11. When the file is successfully saved, delete the original file and rename the new decrypted file matching the original file. Then, paste this file into the extracted folder again.
12. The last step is to compress the folder back to the IPSW format.

Hi,

Do you have any video of this procedure?

[ugamazing]

Re: Macbook M1 bypass FMM / EFI Unlock

Could you please share the used method

Hey, yes, it's simple: Boot to diagnostics. You can now boot to diagnostics on a locked board...couldn't do this on T2 locked board prior. Now you can, on M1.

https://www.youtube.com/watch?v=I9QOZLY1WHA

There may be an easier way to access this menu/option: Have you booted to diagnostics, then used the browser/menu to access files from there? You can even use a locked board to go online via diagnostics boot. But your way is quite intuitive! Very nice.

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

Could you please share the used method

https://www.youtube.com/watch?v=I9QOZLY1WHA

[Mouad666]

Re: Macbook M1 bypass FMM / EFI Unlock

OK, I found a quick way to pull serial info from locked boards. Going to go through and pull more M1 ROM dumps later this week to check for emails; I still haven't found any in the dumps I've checked (over 25 checked now--including 2 more A2442 boards), but going to play with different scenarios (will take time).

Could you please share the used method

[Mario1241]

Re: Macbook M1 bypass FMM / EFI Unlock

I share a way to see this menu, watch this video, I could not do more.https://www.youtube.com/watch?v=I9QOZLY1WHA

[kevingill]

Re: Macbook M1 bypass FMM / EFI Unlock

Is that through Safari via the diagnostics?
If so, you can access a little more if you attach a mouse and use right click to access some menu items. However, I couldn't open items like you say.
I could rename some files, but don't know which ones could be renamed to bypass activation.

[venturaisr]

Re: Macbook M1 bypass FMM / EFI Unlock

I was able to access finder in a locked m1.I can browse and even attach usb but unfortunately can't open any app or terminal since it is greyed out…
Any suggestion?

[Thomas K]

Re: Macbook M1 bypass FMM / EFI Unlock

I'm trying this on a 820-01987
Can't find any email address either.