A new security feature in Apple’s upcoming macOS 13 Ventura will automatically block new USB-C devices from communicating with the operating system until the user can approve the accessory.
Apple left details of the new security feature in its release notes, which appear to be intended to protect newer Apple laptops that carry their M1 or M2 chips as potentially malicious accessories.
According to Apple’s description, the feature will be enabled by default and will require the user to approve a USB-C accessory before they can talk to the operating system, basically a pop-up window on the screen asking permission from the user. . Apple says this does not apply to power adapters, stand-alone displays, and connections to an approved hub, and devices can still be charged even if you don’t use the accessory. Apple says accessories that are already connected will work automatically when you upgrade to the new macOS software.
The move to restrict USB-C devices by default is a tacit gesture to a number of evolving threats that pose a risk to Apple users. Researchers have shown that it is possible to hide malicious implants in normal-looking charging cables that can hijack computers to USB devices for laptops designed to permanently fry the entrails of a computer.
The new macOS feature is also almost identical to the USB Restricted Mode that Apple introduced in iOS 12, which prevents unauthorized accessories and cables from accessing iPhone and iPad data without the owner’s permission, at a time when law enforcement used the phone cracker. devices to prevent the security of Apple devices.
Here is the full description of the release notes (as first seen by The Verge):
On Apple Silicone Mac laptops, the new USB and Thunderbolt accessories require user approval before the accessory can communicate with macOS for connections directly to the USB-C port. This does not apply to power adapters, stand-alone displays, or connections to an approved hub. Devices can still be charged if you choose Do not allow.
You can change the security settings in System settings> Security and privacy> Security. The initial setup is Request New Accessories. Setting up an accessibility switch control sets the policy to always allow the use of accessories. Approved devices can be connected to a locked Mac for up to three days.
Connected accessories during software upgrades from earlier versions of macOS are automatically enabled. New connected accessories before restarting your Mac may be listed and working, but will not be remembered until they are connected to an unlocked Mac and explicitly approved.