Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Status
The first post of this thread is a WikiPost and can be edited by anyone with the appropiate permissions. Your edits will be public.

t2pierre

macrumors newbie
Nov 24, 2019
7
4
mac 15,1 with OCLP 1.0.0
I have noticed that memojis are not supported at all
it is already known not to use it as login picture
I have noticed that icloud, address book, iMessage....all apps that show memoji in prefs panels just freeze or crash trying to show memojis.
 

hyperions

macrumors regular
Sep 14, 2016
100
34
Good morning...
what happens on iMac 12.1?

until this morning starting with efi was fine, I had OCLP 1.0 dated 1 Oct 11.32pm, this morning the system asked me to always update to version 1.0 but dated 2 Oct 5.49pm (which is also found in the official link of version 1.0) , it asked me to reinstall opencore and post-install patch by downloading the KDX add file of 670 MB... but now the boot with efi fails...
furthermore, the new version 1.0 is moved from the applications folder to a new folder created in Library>support application>Dortania

now I restarted the Mac with EFI and USB stick with Sonoma installer, but the normal restart fails after resetting PRAM and SMC too

I tried to re-enter version 1.0 of October 1st, reinstall opencore, but it doesn't start again from EFI
 

Attachments

  • 2.jpg
    2.jpg
    112.2 KB · Views: 115
  • 1.jpg
    1.jpg
    414.6 KB · Views: 76
Last edited:

borp99

macrumors regular
Jun 25, 2020
139
151
I freshly built OCLP 1.0.0 on my cMP 5,1 and it boots up Ventura 13.5 and Sonoma 14.0 perfectly. However, for me, the top bar WiFi icon was crossed out when booting into Monterey 12.7 (which has also been the case with some nightly builds and not others). I looked at the new config.plist and the AirportBrcmFixup.kext kernel injection patch was built with MinKernel = 12.0. I changed this to 22.0, as I believe my BCM943502CD is natively supported under Monterey, and I'm back to having working WiFi again on Monterey.

Could the MinKernel for this kext patch be one digit out for the 5,1 when being built ie. 12 instead of 22? However, 12 may be exactly what's needed for different Mac models or earlier OS's to force some wifi cards to work. However, for me, I needed to manually fix the MinKernel number for this patch. I left everything else automatically configured by OCLP 1.0.0.

Notwithstanding, I continue to be incredibly grateful to the developers for wringing out these hard-won OS gains on our older - but still impressive - Apple hardware.
 
  • Like
Reactions: webg3

pappkristof

macrumors regular
Aug 1, 2015
149
259
Hi,
I have an early 2013 15" MacBook Pro with Ventura 13.6 and OCLP 1.0. In the system settings an update to Sonoma appeared. Is it safe to to update?
Thanks.
 

OKonnel

macrumors 6502
Apr 16, 2009
360
655
Italy
Just successfully installed macOS 14.0 Sonoma on iMac 27" 14.2 (late 2013), i7 CPU and Nvidia GTX 780M.
:mad: ONLY FAILURE: Continuity Camera with my iPhone XS doesn't work with Sonoma, while it worked great with Ventura :mad:

First I installed OCLP 1.0.1, then I restarted the Mac and at Boot, at the sound of the Gong, I pressed and held down the Option key to then activate the new EFIBoot 1.0.1

After the reboot, from the Applications Folder I started the Sonoma's original Apple installer that I had created by downloading the Package using GIBmacOS; but it can also be downloaded from MrMacinbtosh.

At the end of the installation, the Mac restarted in Safe Mode.
BUT BE CAREFUL: on my first restart, perhaps because I use FileVault which immediately asks for the Password, I was unable to get to the Desktop screen and a black screen appeared with the clock at the top and the Password box at the bottom. Furthermore, it was not possible to write the password and the cursor moved jerkily.

So. I turned off the Mac from the button.
To be safe, I also connected the Magic Keyboard via the Lightening-USB cable.
I turned the Mac on, got to the Desktop screen fine and
OCLP offered me to install the Post Install Patch which I therefore installed,
I rebooted and now everything works, including LiveText, Remove Background, Music Mini-Player (now works also in full screen and doesn't crashes!), all Widget, Meteo included also in full screen, etc...
:mad:But Continuity Camera doesn't work :mad:

EDIT:
I corrected the OCLP version number which was wrong.
In the meantime I also tried to reinstall macOS 14.0 Sonoma with USB Key and OCLP 1.0.1 Official and idem for Post Install Patch; but Continuity Camera still doesn't work.

macOS Sonoma 14.0 success.png
 
Last edited:

deeveedee

macrumors 65816
May 2, 2019
1,453
2,116
Peoria, IL United States
For those wondering why I went off on my "silly" computer security tangent, it occurred to me how utterly insane I was for allowing uncertified, 3rd-party software to require that SIP be partially disabled, allow it to root my Mac (breaking the macOS "seal"), allow it to install uncertified software at the network layer (for Wi-Fi) and then to trust my Mac for anything that requires data privacy, data integrity and protected digital identity.

I am typing this on my MacMini8,1 that does not require OCLP (using wired Ethernet). I will be removing OCLP from my Macs and reverting to natively-supported macOS on those devices (macOS that does not require OCLP). I already changed all passwords associated with websites that I visited while using my OCLP-patched Macs.

In order for OCLP to be trustworthy for me, it would need one of the following:
  1. The ability to patch graphics and Wi-Fi without breaking the MacOS "seal" (and thus without rooting my Mac) and the ability to perform the patches without requiring SIP to be partially or fully disabled - OR -
  2. A certified attestation of the chain of custody of the OCLP software (all of it - the python and the post-install patches) and a certification from a FIPS-certified lab that OCLP and the post-install patches are safe and secure. This certified chain of custody and lab test would need to accompany each new OCLP version.
If you are using OCLP, which requires you to partially disable SIP, allow OCLP to break the macOS "seal" and allow OCLP to inject uncertified 3rd-party software into your rooted-Mac (or rooted-hack) and you continue to do your online banking with your Mac, make stock trades with your Mac, login to your e-mail with your Mac or even something seemingly harmless like login to your FaceBook page, you are placing yourself in grave danger.

============================

EDIT: I can't emphasize what I am saying strongly enough. I hope that through my assistance to some of you and through the answers that I have provided in this forum that I have at least demonstrated a small technical competence. The Devs clearly are software geniuses and are software experts. Computer security is my area of expertise, I am well-credentialled, heavily tested/certified and I don't take this lightly. This is too important to treat like a hobby.

When you know enough about computer security, you learn that the reality makes the conspiracy theories look like child's play.
 
Last edited:

rbart

macrumors 65816
Nov 3, 2013
1,334
1,106
France
The magic thing: no one force no one to use OCLP.
We all know it reduces security, it's the counterpart of installing uncertified software on uncertified hardware.
It's up to every people to decide if it's acceptable or not.
It's because Apple OS is not modular and because some of their software only work on the last OS that people have created OCLP and OCLP requires to lower security to work.
If I wasn't an Xcode user, I could stay on my supported Monterey for one more year before buying a new Mac.
Personally, I take the risk. I don't believe the (very) small amount of OCLP users is interesting a lot the hackers. They don't care a lot about macOS, so the small part of OCLP users is ridiculous for their needs.

Your conspiracy theory is a bit ridiculous and pollutes this thread. I don't know what you expect, make your choices and that's all.
 

deeveedee

macrumors 65816
May 2, 2019
1,453
2,116
Peoria, IL United States
@rbart That's all well and good. If you look at the strategy employed by the Devs, you will notice that OCLP is designed to be "set it and forget it" so that even the non-technical Intel-Mac user can install OCLP and restore new life to their Mac. Every Intel-Mac user is now a candidate for OCLP - even those that don't frequent this forum.

That's a large addressable market of unsophisticated users who are unaware of the dangers.

I appreciate your view and opinion.

EDIT: When you know enough about computer security, the reality makes the conpspiracy theories look like child's play. If you believe that my warning is just a "conspiracy theory" ...

EDIT2: I am not telling anyone to stop using OCLP. What I am saying is that you should only use it when you realize that it exposes you and your Mac to computer security dangers that most reading this don't understand. Watch the news for ransomware incidents, stolen identities and hacked e-mail accounts. How do you think this happens? Hackers are not dumb. They are very smart, very clever and very sophisticated. And they don't have to be mean and ugly, so you may not even recognize them.

EDIT3: For those who are disappointed in me because I am "polluting this thread," I didn't come here to win a popularity contest. I am sorry if this reality is too much to digest. For me, this is exactly the kind of content that we should be discussing in a technical forum. Please continue to have fun. Just be safe doing it.
 
Last edited:

reneroeten

macrumors member
Oct 31, 2019
49
51
Hi there!
Since I installed the latest OCLP nighly for Sonoma development (from today:29/09/2023), the Bluetooth doesn't work anymore with my iMac 13.2. The Magic Trackpad is not recognized anymore, and I have only a mouse option in the Control Settings. The Bluetooth can be activated but is not working. Same behavior with my MBP 13.2. With the previous OCLP, everything was working fine. Does anyone encounter the same Bluetooth issue?
yes i do on my imac 12.2 i can switch on my bluetooth but directly switch off again and not working
 

Rambear1998

macrumors newbie
Aug 16, 2023
6
7
make it easy for you dude if your priority is security buy a new macbook that supported new macos. oclp aim is to continue to use legacy macs. this is so irrelevant you are doing this for days here at forum and on discord. make this space for disscusion for the user regarding on their concern using and installing sonoma.
 
  • Like
Reactions: rbart

deeveedee

macrumors 65816
May 2, 2019
1,453
2,116
Peoria, IL United States
For those who want to take measures to protect themselves after using OCLP on their Mac, these are the site/app passwords that I am changing after using OCLP:
  • Apple developer password
  • Facebook
  • InsanelyMac
  • MacRumors
  • Discord
After changing what to me are the "obvious" passwords, I am working my way through all of my passwords, since OCLP rooted my Mac which has my keystore (with some stored passwords). A headache, but worth the effort.
 

deeveedee

macrumors 65816
May 2, 2019
1,453
2,116
Peoria, IL United States
make it easy for you dude if your priority is security buy a new macbook that supported new macos. oclp aim is to continue to use legacy macs. this is so irrelevant you are doing this for days here at forum and on discord. make this space for disscusion for the user regarding on their concern using and installing sonoma.
I am sorry that you don't like me any more. Darn - I was really hoping to win the MacRumors popularity contest. Oh well.
 
  • Like
Reactions: Portiere

MacinMan

macrumors 65816
Jan 27, 2011
1,379
787
Denham Springs, LA
Hey all, I found some issues with Sonoma, which are probably not OLCP related, but I am going to report them anyway so people are aware:

I keep a copy of XQuartz around in case I want X11 access directly in macOS without a Linux, or other NIX VM.
Sonoma introduced a new type of desktop background feature that uses video instead of still images.
In order to make X11 work, XQuartz installs a couple of Plists for LaunchD that set display values. Well these seem to conflict with Sonoma's new desktop features where on reboot / login, the desktop will not have an image. It will have a plain grey background. In order to fix this, XQuartz must be uninstalled along with it's Plists. As I said, this seems to be a Sonoma issue, not OCLP as I was able to discover the issue by comparing my MBP to the iMac, and the only difference on the iMac was Xquartz.

So anyone who wants X11 support in Sonoma, OCLP, or otherwise, use Linux, either in a VM, or on a separate box or even a dual boot. It won't completely break the system if you continue to use XQuartze, it will just mess with the desktop features and you'll end up with a blank desktop if you want to use the new features. You could logout and back in to make the desktop background re-load, but I just suggest uninstalling for now, until XQuartz is updated to address this. Considering it's such an old project, and doesn't get a lot of updates now, and people want cross platform, then my above suggestion still stands. VM, separate machine, or dual boot.
 

trifero

Cancelled
May 21, 2009
2,964
2,805
make it easy for you dude if your priority is security buy a new macbook that supported new macos. oclp aim is to continue to use legacy macs. this is so irrelevant you are doing this for days here at forum and on discord. make this space for disscusion for the user regarding on their concern using and installing sonoma.
And It´s so boring, besides.
 

deeveedee

macrumors 65816
May 2, 2019
1,453
2,116
Peoria, IL United States
BTW - I believe that Open Core is safe. It is only OCLP that I have a problem with for the following reasons:
  1. OCLP breaks the macOS seal. With the broken seal, macOS loses much of its ability to protect from other threats that are not OCLP
  2. OCLP injects 3rd-party, uncertified software into the network layer. Without attestation to chain of custody and without a FIPS-certified lab test, allowing this on your Mac is insane
  3. OCLP must partially disable SIP (the way SIP is partially disabled, I'm not especially concerned about this, but the combination of the broken seal and injected 3rd-party software with SIP expands the threat/attack surface)

Also, I have formulated an attack scenario that I would use to hack an OCLP-patched Mac. It is a multi-step process that I have shared with one person in this thread, but I will not share publicly.
 
Last edited:

luckyduke23

macrumors regular
Mar 28, 2023
158
200
I NEVER update when a major update is what we are talking about.
ALWAYS a clean install and Migration Assistante from a backup.

You won´t believe the amount of liitle problemes you avoid.
I generally agree but so far all went smoothly here without clean install...🙏
 
  • Like
Reactions: trifero

TheDebunker

macrumors newbie
Oct 3, 2023
11
50
Why? Isn't it important to have some security?
Thing is what deeveedee is doing is basically just spreading paranoia and FUD.

His claim is correct in a way that the security will be lowered somewhat, this is simply because it is absolutely impossible to put back the proper drivers into the system or downgrade needed frameworks etc without breaking the seal. Access to the root volume is required for the internal system folders and frameworks to do patching.

A sizeable chunk of the patching is basically adding back drivers from previous OS's that Apple removed and downgrading things, then figuring out how to make them work with the changes on new OS's.

The same goes for SIP but OCLP is actually more intelligent about it and disables it only for the parts that are needed and not entirely, to maintain the best security that is possible while allowing patching.

Also if going by the logic he uses in the claims, OpenCore itself would be equally as bad if not worse since it injects many things directly into memory during boot, like BlueToolFixup for Bluetooth as an example. Root patching only came to be because there was no other way, as some things cannot be injected directly via the bootloader and have to be on disk.

EDIT: Also forgot to mention, the app is entirely open source and the code is readable in Github. As for attestations go, pretty unfeasible for such a small scale open source project especially if they cost money.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.