Piero Bosio Social Web Site Personale

@GossiTheDog "so bitlocker is super secure, right?"

yeah, that's what i thought too, until a few years ago, when most of windows boot environment bugs i found came with bitlocker key dumping or derivation as a side effect

there's more default settings than just that that leads to a less secure configuration

so I've been reversing the classic mac os usb stack

and I found a credits easter egg of sorts.

The OHCI controller driver emulates a hub device, which uses the OHCI root hub registers on the back end.

The USB device string descriptors for this emulated hub have a list of credits on the end, starting from index 6:

Barry Twycross
The USL
Tom Clark
The Expert
Guillermo Gallegos
The UIM
Craig Keithly
Mouse and Keyboard Software
Harold Welch
Mouse and Keyboard Hardware
Dave "Ferg" Ferguson
Generally useful
Kathy Christian
Project Management
Nia Molina
The Best AA
Also Starring...
 
Steve Schwander
Documentation
Rich Kubota
Developer Support
Jai Chulani
Evangelism
Mike Shebanek
Marketing
Bruce Merritt
ADB Shim
Greg Schroeder
Some Management
Dave Falkenburg
General CFM Nastyness

The credits were removed at some point (the OHCI controller driver in Mac OS 9.2.2 has them all dummied out, replaced by a single ASCII space character), but the second part wasn't:

The USB standard device request GET_DESCRIPTOR also implements obtaining unknown descriptors of type 0x40. These return structures that after the standard two-byte descriptor header contain a 16-bit length followed by some data.

The data returned here are PICT-format images. The array used has space for 12 entries, but only 9 are used, and here they all are. (if it looks like less than 9 images are here, please view this post on the remote instance)

(feel free to help with alt text!)

the funniest part about new world mac os: there's a sega vs accolade style check done by the new world mac os bootloader.

open firmware property copyright in the root device must start with "Copyright " and have " Apple Computer, Inc." at offset 19, otherwise the bootloader will show a fatal error.

the intent was: pass this check only on official apple systems that set "Copyright 1983-year Apple Computer, Inc." in the open firmware bootrom

the reality: "Copyright IS NOT BY Apple Computer, Inc." passes the check.

i finally have a mac os 9 low level debugging environment

they called it mips the rabbit because as a rabbit it has long legs so it has a delay slot before it can jump