Update Physical Access - Githubissues

drduh / macOS-Security-and-Privacy-Guide

Guide to securing and improving privacy on macOS

https://drduh.github.io/macOS-Security-and-Privacy-Guide/

MIT License

21.22k stars 1.45k forks source link

Update Physical Access #451

Closed kimg45 closed 6 months ago

kimg45 commented 6 months ago

removed part about flashing the boot ROM as this isn't possible on Apple silicon Macs and reference to thunderstrike attack which doesn't work on apple silicon
added hardware key loggers
removed usbkill as it hasn't been updated in 8 years
remove destructive superglue/epoxy recommendation

drduh commented 6 months ago

The wikipedia article is pretty low quality. Although Thunderstrike is largely mitigated, Trammell Hudson's articles on it are much more interesting and educational about potential implants. Maybe update the link to https://trmm.net/Thunderstrike_31c3/ instead?

Probably just remove the destructive epoxy methods in favor of tamper detection ones.

kimg45 commented 6 months ago

Done

beerisgood commented 6 months ago

MacBooks have build-in USB, Thunderbolt and SD Card protection: https://support.apple.com/guide/deployment/depf8a4cb051/web