t8012 Development Team

Hi, Power! Announcing #PlugNPwn #apple #t2 #security #demo #video #t8012dev @checkra1n #Checkm8 By @Aunali1, @MCMrARM, @h0m3us3r and @su_rickmark blog.t8012.dev/plug-n-pwn/

@jonathandata1 it's decompressed, not decompiled. Do not discredit #infosec

We planned to open source checkra1n in 2020, but unfortunately we're not quite ready for a full release yet. HOWEVER: We just open sourced the entirety of PongoOS, including our kernel patchfinder and SEP exploit! All available at: github.com/checkra1n/pong…

Part 1 of the secrets of your USB-PD controller on the Mac blog.t8012.dev/ace-part-1/

Oops..🤣🤣

@LosAngelesVic But its very strange for a app that is in the App Store that is arm64e clean to trigger this...

@t8012dev i used to use Pacifist to get PowerPC Apps to run on Intel Macs

Another strange error...

@sanitybit It was included as an update as part of Big Sur’s install. Now the IPSW to restore the T2 in configurator is available. This also likely means Apple will stop signing bridgeOS 4.X any moment

bridgeOS 5 brings signed system volumes to the T2, removing most forms of persistence on the device.

@EM3TEK Bridge OS has always been that way. Only the latest. Now the latest bridgeOS can run any number of macOS (older, even unsigned)

@t8012dev Does this means that now OSX releases are now like iPhones IoS releases? Will this complete apples totalitarian push towards one unified closed ecosystem.... And can we truly say w are at the forefront against that shit? Veey interesting developments indeed.

@cloutlorrd300k @FrnKlinP3rez1 @checkra1n @axi0mX The checkra1n tool does not put a spinner, this is for sure fake

@checkra1n @t8012dev @axi0mX Hola Mundo 🗺 Iphone 11 Pro Max👽que Dicen.? ☠️☠️☠️☠️☠️☠️☠️☠️☠️

@FastXela It’s always possible to put in DFU, it’s done entirely in ROM and isn’t affected by software version. Sometimes a malicious computer can kick it out of DFU right away, try another workstation

Mac os 10.15.7 not possible put dfu mode

@luigivsf I’ll look into it, our existing set of patches are for bridgeOS 4.6 which is based on iOS 13... it probably just needs revision

@luigivsf It’s because Big Sur is trying to do a full macOS system restore instead of the T2 restore. I bet we find out details about IPSW based macOS install on T2/x64 next week

@ClassicII_MrMac @MartinNobel_ That’s basically standard procedure for any iOS derivative - once a new version is released they stop signing (TSS) for any prior

@t8012dev @MartinNobel_ I LOVE restoring BridgeOS, so this tweet is very interesting to me 🧐 Might need to test this out, it also sounds like Big Sur Beta BridgeOS downgrades might not be possible anymore. 😳

There are reports that people are unable to restore the T2 / bridgeOS as this time. It is likely related to the imminent release of Big Sur

@FeelitWorking @torproject Try having something malicious in the thunderbolt controller itself (yes it has firmware?!), which connects directly to the Intel PCH UART

@t8012dev @torproject I had a laptop that was compromised late 2013 using adobe flash updates and a tor download that was somehow "altered" to include a trojan. I used Tor, but was given a full history of my internet use. Good job I didn't do anything I shouldn't. Nothing is anonymous on the internet

Don't let the NSA spook you. Use Tor. 🧅🎃

@LosAngelesVic That might in fact be possible, depends on the USB stack

@t8012dev what if i use an Pongo iPhone to jB an iPhone

Anyone who tells you they can do checkra1n without a computer either has learned another exploit (which would be newsworthy on its own), or is trying to get you to install malware

@rA9_baris Hint - the iPad Pro speaks USB-PD in DDU mode...