Mac EFI PIN lock brute force attack (unsuccessful)

mac-efi-pin-lock-brute-force

[Oliver] wiped the hard drive from a Macbook Pro using the ‘dd’ command on another machine. This does a great job of getting everything off the drive, but he was still faced with the EFI PIN lock protection when he tried to put it back into the Mac. You used to be able to clear the NVRAM to get around this issue, but that exploit has now been patched. So [Oliver] set out to use a microcontroller to brute-force the EFI PIN.

You can read his back story at the link above. He had the chance to enter a 4-digit pin before the format process. Now that he’s wiped the drive the code is at least 6 characters long, which is a lot more possibilities¬†(at least it’s numeric characters only!). To automate the process he programmed this Teensy board to try every possible combination. It worked great on a text editor but sometimes the characters, or the enter command wouldn’t register. He guesses this was some type of protection against automated attackers. To get around the issue he added different delays between the key presses, and between entering each code. This fixed the issue, as you can see in the clip after the break. Unfortunately after two 48-hour runs that tried every code he still hasn’t gained access!

[Read more...]

Digidash: digital dashboard for megasquirt


The Digidash project is an open source digital dashboard designed just for the megasquirt EFI system we mentioned in our diy EFI motorcycle post. Unfortunately, the site doesn’t link the hardware design. From the description, I’m assuming that it’s essentially a graphic LCD driven by an Atmel microcontroller that talks to the Megasquirt to get the display info.

mpguino: injector level fuel montoring


[dcb] posted about his work on the mpgduino mpguino. The project uses an arduino with a LCD display to monitor fuel consumption based on vehicle speed and the pulses of the fuel injectors being fired. It’s definitely an interesting project given current fuel costs and the passive nature of the project. You can easily tap the wires needed for the monitor and remove it without voiding your warranty (not that we really care).