Vulnerability in T2 chip used in recent Intel-based Macs allow brute-force attacks on system password, making FileVault storage crackable in reasonable time when password is short enough.

Apple Silicon Macs are unaffected by this vulnerability. On the other hand, Macs without T2 chip are easier to be brute-forced.

Use strong passwords

Time to decrypt the password depends on its length and usage of special characters. Also, avoid usage of “dictionary words” as passwords.

Reference: T2 Mac security vulnerability means passwords can now be cracked

Recommendations

Developer:

Use strong system passwords. Pay additional attention to Intel-based Macs.

QA engineer:

Use strong system passwords. Pay additional attention to Intel-based Macs.

PM/DM:

Use strong system passwords. Pay additional attention to Intel-based Macs.

Leave a comment

Leave a Reply