Macbook M1 bypass FMM / EFI Unlock

[kevingill]

Re: Macbook M1 bypass FMM / EFI Unlock

A DIP8 to SOP8 won't work.
You need a board from AliExpress called "serial number modification tool T2 chip unlocking BIOS reading adapter board" as posted by betonel.
This has USON8 and other types of useful pinouts.

[tungtuoitinh]

Re: Macbook M1 bypass FMM / EFI Unlock

Winbond chip is located on the back side of the board similar with T2 models. Attached you can find some pictures of what I've done. Be careful, it's 1.8V chip, so you need to use appropriate programmer adapter.
If you wonder what kind of wires I've used.. it's old pc IDE cable


Instead of wasting money on T203 (~$200) and get stuck with uson4*3 or DS809SE (~$200) which is exactly an R809F i use this:


64$ RT809F + 15 adapters ( 1.8V adapter required!)
https://s.click.aliexpress.com/e/_A6uAnD
Programmer ( same as DS809SE )


25$ MacBook Apple Notebook Maintenance Serial Number Modification Tool T2 Chip Unlock BIOS Read Adapter Board
https://s.click.aliexpress.com/e/_ApVJfz
Let us program USON2*3 U3750+U3710 Wifi+BT ROM, XSON4*4, Apple T2 ROM USON 4*3 and Macbook M1 SOC, WSON6*5, WSON**6 and WLCSP 16 ball used on A1534 bios or SSD rom.

$52 Sam Connector with Seat Socket Serial Line for DS809SE
https://s.click.aliexpress.com/e/_A0aPKx
Small mod is required to work with RT809F: undo all pins from connector and put it reverse way -> red will be on opposite side , and run a wire from PIN 8 (+) to pin 8 on the board , which you can hold it by hand, without needing to power on MB machine.

in this image, i can see you use apdapter "DIP8 to SOP8 0.65mm" to read Uson8 4*3 T2 chip, does it fit?
sorry for dumb question because im a newbie and I'm a knowledge seeker
Sr english not my main language,
Hope you reply me soon

[SMDFlea]

Re: Macbook M1 bypass FMM / EFI Unlock

I have solution for remove and byoass

You are banned.

[ismailweb]

Re: Macbook M1 bypass FMM / EFI Unlock

How do you get the info from the mac itself? I have A1932. with EFI and Icloud locked but its not erased

I have solution for remove and byoass

[Topcat]

Re: Macbook M1 bypass FMM / EFI Unlock

contact me in inbox

You no longer have an inbox....and if you put that link back in your profile, you'll be permanently banned.

[ismailweb]

Re: Macbook M1 bypass FMM / EFI Unlock

How do you get the info from the mac itself? I have A1932. with EFI and Icloud locked but its not erased

contact me in inbox

[abadcap]

Re: Macbook M1 bypass FMM / EFI Unlock

If you check it online with a paid service (FMM) and the result shows "ON", but the Mac is not linked to your AppleID, then the device was most likely bypassed.

I suppose there is only one way how you can find it out for free: You do restore the bridgeOS and after install the macOS.

[ace.code]

Re: Macbook M1 bypass FMM / EFI Unlock

just a stupid a qst... how can you check if a macbook is bypassed or not .
is check by serial on paid website enough???

[Maxpower3]

Re: Macbook M1 bypass FMM / EFI Unlock

Last character matters too, there can be some overlap between different models.

I often see problems in the serial decoder algorithms.
Especially on iphones with colors and storage.
Does this happen to you too?
I looked at how it was calculated.
this diagram is reproduced on all iphone models with a rotation

XS Max (last digit)
Space Gray- 1 64 4 256 7 512 c 64 g 256 k 256 n 64 R 256 W 512
Silver------- 2 64 5 256 8 512 d 64 h 256 l 512 p 64 T 256 X 512
Gold ------- 3 64 6 256 9 512 f 64 j 256 m 512 Q 64 V 256 Y 512

the letters AEIOUBSZ are also prohibited here

[lotus1]

Re: Macbook M1 bypass FMM / EFI Unlock

Hi, is there any update regarding M1 chipset bypass?

[VHS]

Re: Macbook M1 bypass FMM / EFI Unlock

There are Bluetooth sniffers. Getting it's address should be as easy as the wifi one.

[walou]

Re: Macbook M1 bypass FMM / EFI Unlock

otherwise the bt and wifi mac are used to generate the UUID which i think is used to apple for activation lock .

i'v found how the iphone UUID are generated but there is no information for macbook devices , my plan is to use VM and edit the config file to edit the uuid

i'v tried it with sn and linked the VM to my icloud and it sent the modified SN that i'v entered

[walou]

Re: Macbook M1 bypass FMM / EFI Unlock

Hello

to have the wifi mac just use your wifi in the activation lock screen and check the router configuration page to see the connected devices , i was able to retrieve the wifi mac but still dont have any idea how to get the bleutouth mac

[sangnm1987]

Re: Macbook M1 bypass FMM / EFI Unlock

Thanks for the info.

[techman9510]

Re: Macbook M1 bypass FMM / EFI Unlock

Could you explain the "Business Apple ID"? Does it allow supervisor to stay on top of their devices including MDM? Thanks

so my plan was to write the sn, wifi/bluetooth address to a T2 MacBook and activate it with checkm8 and from their supervise the device with apple configurator 2. in order to get a MDM activation key you need to have a business Apple ID or school Apple ID. once you have it signed up you will get an activation key and from their put that activation key on the locked m1 and it should in theory bypass it because that activation key is tied to the sn and wifi/bluetooth address. but its all a theory and I don't have a business Apple ID and I don't have to tools reprogram the Nand on the T2 MACBOOK. and I also have no way of getting the wifi/bluetooth Mac address from the M1 MACBOOK. honestly getting the Mac address from the locked M1 is the biggest challenge.

[sangnm1987]

Re: Macbook M1 bypass FMM / EFI Unlock

so in order to get a MDM activation key the MacBook has to be supervised and in order to do that you need a business or school Apple ID. I'm in the process of getting the business Apple ID and I will test the mdm activation key on a iPad that is jailbroken.

Could you explain the "Business Apple ID"? Does it allow supervisor to stay on top of their devices including MDM? Thanks

[TrumanHW]

Re: Macbook M1 bypass FMM / EFI Unlock

I used the Information from that Website to create a simple tool that doesn't use any server communication with the serial to calculate the results.

Website: https://tobidi0410.github.io/applesndecoder/
Source: https://github.com/ToBiDi0410/ToBiDi...applesndecoder

If you want to, I could also add the information from your Database for the Models etc.

Haven't forgotten: Gonna look for the DataBase today...
Might need an NDA just in case any private info is included.

Check your PM if you get a chance. Thanks!!!

[TrumanHW]

Re: Macbook M1 bypass FMM / EFI Unlock

Too bad more units don't have this enabled:

I'm not sure if this does anything ... but it might ?

[alerm]

Re: Macbook M1 bypass FMM / EFI Unlock

Hello ,
when i was playing with the lock screen i tried "user" as apple id and "pwd" as password , it gaves me the abbility to unlock via security question ( in my case it was the day and the month of birth )
you can try up to 4-5 attempts then the option will be disabled for a bit amount of time .

i think we can easily lunch a brut force attack to find it (366 combination ) i dont know if there multiple questions or this is the only one .

This happens with apple id "null" and password "null" too.
Don't this is the Macbooks Apple ID but just one random Apple ID.
Even if you guess the Birthday and reset the password it will say "This Mac is linked to a different ID"

[walou]

Re: Macbook M1 bypass FMM / EFI Unlock

Hello ,
when i was playing with the lock screen i tried "user" as apple id and "pwd" as password , it gaves me the abbility to unlock via security question ( in my case it was the day and the month of birth )
you can try up to 4-5 attempts then the option will be disabled for a bit amount of time .

i think we can easily lunch a brut force attack to find it (366 combination ) i dont know if there multiple questions or this is the only one .