Badcaps.net Forum
Go Back   Badcaps Forums > Troubleshooting Hardware & Devices and Electronics Theory > Troubleshooting Laptops, Tablets, and Mobile Devices > BIOS Requests ONLY!
Register FAQ Calendar Search Today's Posts Mark Forums Read

 
Thread Tools Display Modes
Old 02-03-2022, 02:20 AM   #21
betonel
Member
 
betonel's Avatar
 
Join Date: Nov 2015
City & State: bucharest
My Country: romania
Line Voltage: 380V 50Hz
I'm a: Knowledge Seeker
Posts: 31
Default Re: Macbook M1 bypass FMM / EFI Unlock

Quote:
Originally Posted by ebaymonster View Post
I have 5pcs MBA 2020 m1 and 1 MBP 13 m1 + t203. if you want i can desoldering and make dump.
It will be great.

I have tried M1.bin and M2.bin, MBP did not start, it entered dfu mode and did restore with appleconfigurator2, which updated iBoot-7429.81.3. Now it starts but nothing has changed (SN/Activation Lock is still the same - can check SN in diagnostics mode). If I put old dump which was working before with iBoot-6723.50.2 will power on then restart, cycle all over again.

Data we need might be in ssd NAND, but I think secureboot bits are set in SOC bios rom. We need an easier way to access NAND sysconfig area.
betonel is offline   Reply With Quote
Old 02-07-2022, 03:25 AM   #22
mazoot
Master of thoug
 
mazoot's Avatar
 
Join Date: Jan 2019
City & State: Chisinau
My Country: Moldova
Line Voltage: 220VAC 60hz
I'm a: Knowledge Seeker
Posts: 21
Default Re: Macbook M1 bypass FMM / EFI Unlock

Quote:
Originally Posted by Nico Latour View Post
m1 bin is encrypt! when you decrypt you see serial!!! but change serial in this bin is not working for unlock icloud)
how about MDM locked M1 with modified serial situation? Did you test ?
mazoot is offline   Reply With Quote
Old 02-07-2022, 05:47 AM   #23
betonel
Member
 
betonel's Avatar
 
Join Date: Nov 2015
City & State: bucharest
My Country: romania
Line Voltage: 380V 50Hz
I'm a: Knowledge Seeker
Posts: 31
Default Re: Macbook M1 bypass FMM / EFI Unlock

Haven't found a way (yet) to change the SN for M1 machines. There is no clue SN would be in Winbond SOC rom. Writing content from other machine would stop booting, after dfu restore SN is unchanged. It might be here encrypted, and backed up in ssd nand flash like on iphones/ipads. In the end, can't see the scope of having this SOC chip.. maybe it holds iBoot bootloader code, or act as a backup and SN is encrypted here.

Another lead to be investigated is to intercept spi communication with the chip in various states of machine: boot.. mdm.. activation lock check.. efi password verification.
I'll put my logic analyzer at work and keep you updated. Any suggestion is welcomed.
betonel is offline   Reply With Quote
Old 02-07-2022, 05:55 AM   #24
mazoot
Master of thoug
 
mazoot's Avatar
 
Join Date: Jan 2019
City & State: Chisinau
My Country: Moldova
Line Voltage: 220VAC 60hz
I'm a: Knowledge Seeker
Posts: 21
Default Re: Macbook M1 bypass FMM / EFI Unlock

Is your m1 have boot secure locked? can you boot from usb etc ?
mazoot is offline   Reply With Quote
Old 02-07-2022, 05:58 AM   #25
betonel
Member
 
betonel's Avatar
 
Join Date: Nov 2015
City & State: bucharest
My Country: romania
Line Voltage: 380V 50Hz
I'm a: Knowledge Seeker
Posts: 31
Default Re: Macbook M1 bypass FMM / EFI Unlock

Yes, secureboot is enabled + activation lock. It would be nice to have dump of M1 machine without icloud/mdm one with secureboot disabled and one with secureboot enabled, so we can compare content.
betonel is offline   Reply With Quote
Old 02-07-2022, 07:51 AM   #26
.::iRizwan::.
Member
 
.::iRizwan::.'s Avatar
 
Join Date: Apr 2016
City & State: RWP
My Country: Pakistan
Line Voltage: Very High ;)
I'm a: Professional Tech
Posts: 42
Default Re: Macbook M1 bypass FMM / EFI Unlock

Secureboot settings are stored in NVRAM
you can disable Secureboot and enable USB boot by commands on T2 jailbroken machines.
__________________
.:: One Machine can do the work of 50 ordinary men , No Machine can do the work of 1 extraordinary man ::.
.::iRizwan::. is offline   Reply With Quote
Old 02-07-2022, 07:53 AM   #27
.::iRizwan::.
Member
 
.::iRizwan::.'s Avatar
 
Join Date: Apr 2016
City & State: RWP
My Country: Pakistan
Line Voltage: Very High ;)
I'm a: Professional Tech
Posts: 42
Lightbulb Re: Macbook M1 bypass FMM / EFI Unlock

Quote:
Originally Posted by .::iRizwan::. View Post
Secureboot settings are stored in NVRAM
you can disable Secureboot and enable USB boot by commands on T2 jailbroken machines.
Two commands actually.
one for Disable secure boot
and one for Enable USB Boot.
.::iRizwan::. is offline   Reply With Quote
Old 02-07-2022, 07:55 AM   #28
.::iRizwan::.
Member
 
.::iRizwan::.'s Avatar
 
Join Date: Apr 2016
City & State: RWP
My Country: Pakistan
Line Voltage: Very High ;)
I'm a: Professional Tech
Posts: 42
Default Re: Macbook M1 bypass FMM / EFI Unlock

some will argue that can be done in a single command
yes can but actually these are 2 separate commands.
.::iRizwan::. is offline   Reply With Quote
Old 02-07-2022, 08:05 AM   #29
betonel
Member
 
betonel's Avatar
 
Join Date: Nov 2015
City & State: bucharest
My Country: romania
Line Voltage: 380V 50Hz
I'm a: Knowledge Seeker
Posts: 31
Default Re: Macbook M1 bypass FMM / EFI Unlock

Apparently after flashing SOC rom I can see external boot device. Who can share working external drive image of BigSur then try to copy it into internal M1 flash and start normally.
Attached Images
File Type: jpg 20220207_154913.jpg (315.5 KB, 139 views)
betonel is offline   Reply With Quote
Old 02-07-2022, 08:42 AM   #30
HansTodi01
New Member
 
Join Date: Dec 2021
City & State: Cologne
My Country: Germany
Line Voltage: 230VAC
I'm a: Knowledge Seeker
Posts: 4
Lightbulb Re: Macbook M1 bypass FMM / EFI Unlock

I don't know if this can help. But it is possible to dump every partition mounted in diagnostics mode. There are some Firmware Files (img4) on there. But this probably wouldn't help, right?
HansTodi01 is offline   Reply With Quote
Old 02-07-2022, 09:00 AM   #31
betonel
Member
 
betonel's Avatar
 
Join Date: Nov 2015
City & State: bucharest
My Country: romania
Line Voltage: 380V 50Hz
I'm a: Knowledge Seeker
Posts: 31
Default Re: Macbook M1 bypass FMM / EFI Unlock

Quote:
Originally Posted by HansTodi01 View Post
I don't know if this can help. But it is possible to dump every partition mounted in diagnostics mode. There are some Firmware Files (img4) on there. But this probably wouldn't help, right?
How would you do that? Please detail your findings so we can replicate.
betonel is offline   Reply With Quote
Old 02-07-2022, 09:11 AM   #32
HansTodi01
New Member
 
Join Date: Dec 2021
City & State: Cologne
My Country: Germany
Line Voltage: 230VAC
I'm a: Knowledge Seeker
Posts: 4
Default Re: Macbook M1 bypass FMM / EFI Unlock

Quote:
Originally Posted by betonel View Post
How would you do that?
As it turns out, you can download files to an External Storage Device using the built-in Safari. So I also tried if you could upload files from mounted partitions, and yes this work perfectly fine (on some sites it won't).

So I quickly coded a Webpage with JSZip that combines all selected files to a ZIP and then starts the download. The ZIP is then saved to the Storage Device using Safari.
It would probably work out to just use Google Drive or something, but this was the most local solution (nothing saved on server, basically just download your uploaded files).

I used my web server and domain to do this because it seems to require an actual Domain and also doesn't allow PHP Files.

There are multiple Partitions on there, which you can see if you go to:
Safari --> Settings --> Download Folder --> Select

(At the top, where your current folder is displayed, you can click on the dropdown and then select the MacBook to see even more)
HansTodi01 is offline   Reply With Quote
Old 02-07-2022, 10:38 AM   #33
betonel
Member
 
betonel's Avatar
 
Join Date: Nov 2015
City & State: bucharest
My Country: romania
Line Voltage: 380V 50Hz
I'm a: Knowledge Seeker
Posts: 31
Default Re: Macbook M1 bypass FMM / EFI Unlock

Download terminal app in place of safari.app overwrite, close safari.. open again then u re in terminal. Too good to be true, but worths trying.
betonel is offline   Reply With Quote
Old 02-07-2022, 10:44 AM   #34
HansTodi01
New Member
 
Join Date: Dec 2021
City & State: Cologne
My Country: Germany
Line Voltage: 230VAC
I'm a: Knowledge Seeker
Posts: 4
Default Re: Macbook M1 bypass FMM / EFI Unlock

I think you can't write to the partitions. But I will try this soon
HansTodi01 is offline   Reply With Quote
Old 02-07-2022, 01:34 PM   #35
betonel
Member
 
betonel's Avatar
 
Join Date: Nov 2015
City & State: bucharest
My Country: romania
Line Voltage: 380V 50Hz
I'm a: Knowledge Seeker
Posts: 31
Default Re: Macbook M1 bypass FMM / EFI Unlock

Quote:
Originally Posted by HansTodi01 View Post
I think you can't write to the partitions. But I will try this soon
Sure you can, I have downloaded some tests and it worked. But don't know about overwrite.
betonel is offline   Reply With Quote
Old 02-07-2022, 07:01 PM   #36
ebaymonster
New Member
 
Join Date: Dec 2021
City & State: Chernivtsi
My Country: Ukraine
Line Voltage: 220
I'm a: Knowledge Seeker
Posts: 6
Default Re: Macbook M1 bypass FMM / EFI Unlock

tomorrow I will have a MacBook Air without blocking /absolutely normal. what do i need to do ?!
1)....
2)....
3)....

Last edited by ebaymonster; 02-07-2022 at 07:04 PM..
ebaymonster is offline   Reply With Quote
Old 02-07-2022, 08:16 PM   #37
Stephen
Meow Meow MEOW!
 
Stephen's Avatar
 
Join Date: Apr 2020
City & State: USA 🇺🇸
My Country: United States
Line Voltage: 120VAC 60hz
I'm a: Hardcore Geek
Posts: 412
Default Re: Macbook M1 bypass FMM / EFI Unlock

Update:

Socrom on MBA 13" M1 does not have SN written whatsoever. If it is written it is coded differently. I should have an unlocked M1 arriving next week
__________________

MEOWING IN THE IMPOSSIBLE UNIVERSE!
Stephen is offline   Reply With Quote
Old 02-08-2022, 06:58 AM   #38
Nico Latour
Banned
 
Join Date: Sep 2019
City & State: nice
My Country: france
I'm a: Hobbyist Tech
Posts: 75
Default Re: Macbook M1 bypass FMM / EFI Unlock

Quote:
Originally Posted by Stephen View Post
Update:

Socrom on MBA 13" M1 does not have SN written whatsoever. If it is written it is coded differently. I should have an unlocked M1 arriving next week
I already said this when you said there is no number in it (m1 bin is encrypted)
Nico Latour is offline   Reply With Quote
Old 02-08-2022, 08:13 AM   #39
ebaymonster
New Member
 
Join Date: Dec 2021
City & State: Chernivtsi
My Country: Ukraine
Line Voltage: 220
I'm a: Knowledge Seeker
Posts: 6
Default Re: Macbook M1 bypass FMM / EFI Unlock

has anyone tried to unsolder SSDs and read them? an acquaintance of mine says he can solder them to his phone or tablet and read through ibox.
ebaymonster is offline   Reply With Quote
Old 02-08-2022, 08:23 AM   #40
qava
Member
 
Join Date: Jun 2018
City & State: Katowice
My Country: Poland
Line Voltage: 230VAC 60HZ
I'm a: Knowledge Seeker
Posts: 21
Default Re: Macbook M1 bypass FMM / EFI Unlock

Hi. I get the 2020 M1 MBP, A2338 chassis 820-02020-11 with UF260 8MBIT-3.0V W25Q80DVUXIE.
Can I do an activation after using T2 T203 programmer?
This model is supported?
qava is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump



Badcaps.net Technical Forums 2003 - 2022
Powered by vBulletin ®
Copyright ©2000 - 2022, Jelsoft Enterprises Ltd.
All times are GMT -6. The time now is 11:42 PM.
Did you find this forum helpful?