ChanServ changed the topic of #asahi-re to: Asahi Linux: porting Linux to Apple Silicon macs | Hardware / boot process / firmware interface reverse engineering | WARNING: this channel (only) may contain binary reverse engineering discussion | RE policy: https://alx.sh/re (MANDATORY READ) | GitHub: https://alx.sh/g | Wiki: https://alx.sh/w | Logs: https://alx.sh/l/asahi-re
cylm has joined #asahi-re
chadmed_ has quit [Remote host closed the connection]
hertz has joined #asahi-re
hertz has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
seeeath has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
seeeath has joined #asahi-re
<amarioguy>
marcan: i don't want to wade into binary re in #asahi but i looked at the reduced security tickets they root to a different root ca
<amarioguy>
looked at ibss for j313 i think and it's what made that decision
<amarioguy>
can't be ROM because iPad uses that same rom too
Zopolis4 has joined #asahi-re
<amarioguy>
so i'm almost certain ROM requires a personalized ticket
<amarioguy>
(fun note the ca it roots to is the old x86 one, guess the T2 wanted to stop by and say hi :) )
<marcan>
amarioguy: yes, that tracks
<marcan>
iBoot1 probably always needs to be personalized
DragoonAethis has quit [Quit: hej-hej!]
DragoonAethis has joined #asahi-re
<nicolas17>
amarioguy: interesting thing we found recently... CarPlay requires the car to authenticate itself as a certified accessory, using an Apple-provided auth chip, same as any other MFi accessory
<nicolas17>
but there's now a CarPlay Simulator app in Xcode, you plug an iPhone to a Mac and it shows the car UI on the Mac... so how does *that* work? can you just grab the simulator's key and make uncertified hardware?
<chadmed>
im pretty sure the chinesium manufacturers have done this already
<nicolas17>
turns out it generates a SEP-backed key, and uses server-side attestation that it's SEP-backed
<marcan>
cute
<nicolas17>
which is why the simulator requires a T2 or AS Mac
<chadmed>
you can get little boxes on aliexpress that do carplay on cars that do not support it OOTB
<amarioguy>
nicolas17: there's like two attestation like things i heard of on apple