Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #57623

Re: File vault, firmware password, etc

From Jolly Roger <jollyroger@pobox.com>
Newsgroups comp.sys.mac.system
Subject Re: File vault, firmware password, etc
Date 2014-03-05 18:28 +0000
Organization People for the Ethical Treatment of Pirates
Message-ID <bnp8muFqnmrU1@mid.individual.net> (permalink)
References <1lhxa48.1f825xadchjy0N%dcohenspam@talktalk.net> <bnjdsqFii1pU1@mid.individual.net> <bnjkg2Fk228U2@mid.individual.net> <lf2cp9$1kr$1@reader2.panix.com> <lf7q17$la$1@reader2.panix.com>

Show all headers | View raw

On 2014-03-05, billy@MIX.COM <billy@MIX.COM> wrote:
> I wrote, quoting Jolly Roger <jollyroger@pobox.com> about the EFI
> Firmware Password:
>
>> > Also, someone with root access to the machine can read the firmware
>> > password easily with the nvram command-line utility.
>> 
>> I will try to look at this later (don't have a password protected
>> machine available right now).
>
> This is from a 2013 MacBook Pro running 10.9.2.  Output has been
> truncated for posting here, but you may rest assured the password
> is not anywhere in these data.
>
>  $ sudo nvram -p   [Results are the same when not run as root...]
>  boot-image %02%01%0c%00%d0A%03%0a%00%00%00%00%01%01%06%00%02%1f
>  boot-gamma %10%06%00%00%c5%9c%00%00%00%00%00%00%f2%00%00%00%00
>  boot-args  -v debug=0x100
>  SystemAudioVolume	  L
>  backlight-level	  r%04
>  SmcFlasherResult	  %00%00%00%00%00%00%00%00%00%00%00%00%00
>  prev-lang:kbd		  en:0
>  efi-apple-payload0-data  %02%01%0c%00%d0A%03%0a%00%00%00%00%01
>  RemoteDisabled		  %01
>  fmm-computer-name	  Sluggy
>  bluetoothActiveControllerInfo	%1d%82%ac%05%00%00%00%13%18%1d%88
>  efi-apple-payload0		<array><dict><key>IOMatch</key>
>  efi-boot-device-data		%02%01%0c%00%d0A%03%0a%00%00%00%00
>  efi-boot-device		<array><dict><key>IOMatch</key>
>  LocationServicesEnabled	%01
>
> This is with the EFI security mode set to full, as opposed to command.
> I didn't try the command mode, but I don't expect it'd be different.
>
> The only way to do this is by running (or fishing out and copying to
> someplace like /usr/local/bin) Apple's setregproptool, which lives in
> the recovery partition (or on the install DVD for older OS versions), in
> /Applications/Utilities/Firmware\ Password\ Utility/Contents/Resources/.
>
> $ setregproptool -h
> Error: this tool must be run as root.
> $ sudo setregproptool -h
> Password:
> setregproptool v 2.0 (9) Aug 24 2013
> Copyright (C) 2001-2010 Apple Inc.
> All Rights Reserved.
>
> Usage: setregproptool [-c] [-d [-o <old password>]] [[-m <mode> -p <password>] -o <old password>]
>
>    -c              Check whether password is enabled. 
>                            Sets return status of 0 if set, 1 otherwise.
>    -d              Delete current password/mode.
>                            Requires current password on some machines.
>    -p              Set password.
>                            Requires current password on some machines.
>    -m              Set security mode.
>                            Requires current password on some machines.
>                            Mode can be either "full" or "command".
>                            Full mode requires entry of the password on
>                            every boot, command mode only requires entry
>                            of the password if the boot picker is invoked
>                            to select a different boot device.
>
>                    When enabling the Firmware Password for the first
>                    time, both the password and mode must be provided.
>                    Once the firmware password has been enabled, providing
>                    the mode or password alone will change that parameter
>                    only.
>
>    -o              Old password.
>                            Only required on certain machines to disable
>                            or change password or mode. Optional, if not
>                            provided the tool will prompt for the password.
>
> Billy Y..

Good to know. Thanks for doing the research.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-03 08:57 +0000
  Re: File vault, firmware password, etc Tom Stiller <clusterfux.upmon@gmail.com> - 2014-03-03 13:20 +0000
    Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-03 15:13 +0000
      Re: File vault, firmware password, etc Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-03 16:07 +0000
        Re: File vault, firmware password, etc me@home.spamsucks.ca (Király) - 2014-03-03 16:19 +0000
          Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-03 17:57 +0000
            Re: File vault, firmware password, etc me@home.spamsucks.ca (Király) - 2014-03-04 00:03 +0000
              Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-04 12:08 +0000
                Re: File vault, firmware password, etc me@home.spamsucks.ca (Király) - 2014-03-04 19:31 +0000
                Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-04 20:46 +0000
                Re: File vault, firmware password, etc Tom Stiller <clusterfux.upmon@gmail.com> - 2014-03-04 21:41 +0000
                Re: File vault, firmware password, etc nospam <nospam@nospam.invalid> - 2014-03-04 17:01 -0500
                Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-04 23:09 +0000
                Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-04 22:06 +0000
                Re: File vault, firmware password, etc Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-04 22:25 +0000
                Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-04 22:39 +0000
                Re: File vault, firmware password, etc Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-03-04 23:26 +0000
                Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-05 00:10 +0000
                Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-04 21:48 +0000
                Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-04 23:09 +0000
        Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-03 16:25 +0000
      Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-03 17:05 +0000
        Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-03 17:10 +0000
        Re: File vault, firmware password, etc billy@MIX.COM - 2014-03-05 18:22 +0000
          Re: File vault, firmware password, etc Jolly Roger <jollyroger@pobox.com> - 2014-03-05 18:28 +0000
    Re: File vault, firmware password, etc dcohenspam@talktalk.net (Daniel Cohen) - 2014-03-03 17:57 +0000
      Re: File vault, firmware password, etc Tom Stiller <clusterfux.upmon@gmail.com> - 2014-03-03 19:11 +0000
  Re: File vault, firmware password, etc Alan Browne <alan.browne@FreelunchVideotron.ca> - 2014-03-04 17:10 -0500

csiph-web