How to check if your Apple Silicon Mac is booting securely (eclecticlight.co)

s/booting securely/running only the code Apple approves of/g

I had to do this today for a Universal Audio Apollo audio interface. Glad it’s on a dedicated machine.

https://help.uaudio.com/hc/en-us/articles/360057137692-Apple...

Useful, thank you! Looks like the author just enjoys helping fellow nerds. Nice

`man csrutil`

Note that checking anything in userspace on a compromised machine does not actually prove that the machine is not compromised. It is very easy to boot insecurely and then make everything lie that the boot was secure.

The problem is if you enable filevault then you can’t ssh into the mac remotely until someone locally logs in.

Means I end up using filevault on my laptop, but not on my desktop.