There's a Way to Reset Mac Firmware Passwords without Apple's Help

There's a Way to Reset Mac Firmware Passwords without Apple's Help
 
Jun 25, 2016 23:10 GMT By Catalin Cimpanu

 
A security engineer that goes by the name fG!, specilized in Mac security and reverse engineering, has found a way to reset a Mac's firmware password without help from Apple's support team.
Apple allows iMac and MacBook users to set a password for their firmware, so no intruder can go in there and change core device settings.
Apple helps authorized users to reset their firmware password
Just like any password, users tend to forget it, once in a while. In case this happens, users can call Apple Support, and during boot-up, they're guided through a process of pressing five keys simultaneously [SHIFT + CONTROL + OPTION + COMMAND + S] to make a long code appear on their screen.
 
Crooks are selling SCBO files online for $100
fG! says he discovered shady online services that were providing SCBO files, but for a fee of $100. Since trusting this kind of services and running mysterious code on his laptop did seem like a good idea, the researcher set out to find out how SCBO and Apple's EFI (Extensible Firmware Interface) worked, and if he could find a way to bypass this process.
You can read the step-by-step reverse engineering process on fG!'s personal blog, but the good news is that he managed to find a way to do it. Below are the researcher's finding.
 
 Full Article Here