MacBook Pro 13" Touch Bar 2018 820-00850

Yes that is definitely the spot, but without schematic there's nothing that will interface to it - even when the pads are revealed. I ordered the smallest SAM connector and even spoke with the only two known vendors of these small of adapters and there is nothing smaller that they make at this time. These SAM adapters are for the 2015-2016 model Macbook Pro/Air/12" but even these are too big to fit.

 

yes there is another way i try it .... the sam conecteur is jtag pinout ...not for isp ... i think its easy ...

 

Well then what are you using to interface to the pins? Are you just running wires directly to the pads or what?

 

news ?

 

component name ?

 

A1990. 820-01041-07.
T2-security chip firmware dump.(verified)
Locked and unlocked from same macbook N1.
N2 is another macbook with icloud lock....

Be very careful with this model. If will corrupt firmware manifest, then will get brick forever.

after some changes in firmware needs firmware recovery by configuration2 software.

But can't find lock solution. may be someone can find it.

 

You dumped it via sam connector layout? it maynot be full dump? Just a guess.

 

Dump directly from chip: 25L3206. 4mb chip full dump.

 

Desoldered the chip and then used reader? I am not sure if you would even want to share or keep it up to you.

 

liars elsewhere

 

confused

oh wait 25L3206 LOL

 

ARE YOU SURE YOU HAVE READ 25L3206 FROM TOUCHBAR 2018 I HAVE 3 MOTHERD BORD MACBOOK PRO 2018 NOTHING LIKE THIS JUSTE T2 CONTROLOR
????????

 

MBP 2018 15

 

suggestion of researcher

 

Every word you have claimed in this post is nonsense.

"T2-security chip firmware dump (verified)" - FALSE
1) The firmware files you have provided are merely 32 kbit size chips, Apple has not used 32kbit chips since PowerBook days.
2) Your claim that they are Macronix 25L3206 chips, however, as can be clearly explained by iFixit's teardown guides, the only Micron chip found anywhere on the new 2018 boards is the 1GB chip found underneath the T2 chip. (See photo)
3) I highly doubt that Apple, after using ONLY 64 kbit chips for every one of their Mac product lines between 2008-2017, would suddenly downgrade and with their newer most secure model use a 32 kbit chip again. Call me crazy, but I don't buy it.

"Locked and unlocked from same macbook N1." - FALSE
1) If you have even looked at the files you provided, you'll clearly see the file header says that they are bot IMG4 and IMP4 file formats. That's strange, why would Apple use the iPhone and iPad encryption algorithms on their brand newest MacBook models? Answer: They wouldn't. These are solely file formats used with their iDevice line of products, as can be clearly explained in detail here ---> https://www.theiphonewiki.com/wiki/IMG4_File_Format

IMG4 File Format - The iPhone Wiki

theiphonewiki.com

2) Now that we know these are iDevice dump files, it makes absolutely perfect sense why you say they are MX25L3206 chips, because these are the EXACT chips used on billions of iDevice models, and they just so happen to be encrypted with, you guessed it, IMG4 and IMP4 encryption formats.

"after some changes in firmware needs firmware recovery by configuration2 software."
Well of course they would need to be restored with Apple Configurator 2.app, they are iDevice files, and anybody that has any experience with trying to upload custom firmware to iDevices will agree when I say that you need to have advanced knowledge of firmware manifests (more than what is publicly available online!) OR a bootrom/iBoot exploit to do so. Apple Configurator 2 is used to provision devices, and I'm sure there is probably a way to upload custom firmware with it, but we're not talking about MacBooks anymore, so again, FALSE.

Unless you can prove otherwise, I'm going to say that you're just trolling and should be exposed for it.

 

Proofs? How was it interfaced to be able to dump? What protocol does it use? SPI? I2C? Some other protocol? The claim is that the dumps given have been taken directly from "(MX)25L3206", which is a flash chip and definitely NOT the T2. And if the T2 was so easily dumped, if not using the powder coated suspected port location, then the chip would have had to have been removed to dump. So, if the chip was removed, and somehow accessed afterwards, it makes no sense that the 1GB flash was left connected to the board as well (T2 chip lays on top of Flash) especially considering we already all know how to dump a flash chip .

No pics? User has yet to reply about how any of what he claims was possible. If he was generous enough to provide the dumps why not explain the process afterwards if help is truly being sought?

Also T2 firmware has already been available -> http://newosxbook.com/articles/BridgeOS.html

 

MX25U3235F
If will corrupt this chip of firmware, then will get brick forever.
MAKE BACKUP.