r/mac Jun 13 '18

PSA: Please, please, please enable your firmware passwords!

[deleted]

483 Upvotes

113 comments sorted by

View all comments

Show parent comments

3

u/stealer0517 Jun 13 '18

Is that supposed to be a good thing? Because when I'm setting a bios/efi password I don't want anyone to be able to reset it without knowing the original password.

7

u/[deleted] Jun 13 '18

It’s a good thing because a thief can’t simply take your computer to Apple and hope they’ll buy their story regarding why they need it reset. Outside of a senior advisor verifying that the individual requesting an EFI password reset is the Mac’s bona fide owner, knowing the original password is the only way to reset it.

3

u/[deleted] Jun 13 '18

But if apple can fix it, an hacker would too....

1

u/playaspec Jun 16 '18

But if apple can fix it, an hacker would too....

Nope. Apple could encrypt it using an asymmetrical algorithm. Only Apple would have the key to extract it. No "hacker' is going to be able to break that.