[MacTUG] USB Restricted Mode

[Glenn Anderson]

I have come across a new feature of MacOS Ventura, USB Restricted Mode.

Basically, Macs with Apple silicon require user approval for new USB and Thunderbolt accessories before allowing them to be communicate with the OS. This has been around for a while with iOS and iPadOS.

Note, if one isn’t signed in and plugs in such a device one gets the message on the screen “Unlock to ?Use Accessories”

It sounds like this feature is good for security as it should help protect against devices/software  that try to steal info, such as plugging into a power station to charge and it trying to get into your system. ( It still may not be a good idea to plug into questionable charging things.  )

Here is a blurb about it…

"
How USB Restricted Mode works

The idea is that when a new USB or Thunderbolt device is connected to the Mac, the user will be asked to approve the connection. If a Mac is locked the end user must unlock it before the computer will recognize the accessory. This uses the new-to-the-Mac allowUSBRestrictedMode restriction. The protection is initiated when your Mac has been left locked for an hour or so.

Apple says it doesn’t apply to power adapters, displays, or connections to an approved hub, and devices will still charge even if you choose Do Not Allow for use of a connected accessory. The idea is that energy flows, but data does not.

Why do you want it? The security environment continues to deteriorate, and the idea here is that this protection provides one more wall to protect Mac users and their data. It also puts a stop to systems such as GrayKey to crack hardware security to get to the data.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.uwaterloo.ca/pipermail/mactug/attachments/20221109/16f846c6/attachment.html>