Mac users who upgrade to macOS High Sierra will benefit from a significant new security feature that works in the background.

macos high sierra
macOS High Sierra automatically checks a Mac's EFI firmware against Apple's database of "known good" data to ensure it hasn't been tampered with, according to a series of tweets from an Apple engineer.

The tweets have since been deleted, but a summary remains available on the Mac blog The Eclectic Light Company.

The new utility eficheck, located in /usr/libexec/firmwarecheckers/eficheck, runs automatically once a week. It checks that Mac's firmware against Apple's database of what is known to be good. If it passes, you will see nothing of this, but if there are discrepancies, you will be invited to send a report to Apple.

If the check fails, a prompt will appear with options to "Send to Apple" or "Don't Send." The selection is remembered in subsequent weeks.

eficheck
The "eficheck" tool sends the binary data from the EFI firmware, and preserves user privacy by excluding data which is stored in NVRAM, according to The Eclectic Light Company. Apple will then be able to analyze the data to determine whether it has been altered by malware or anything else.

The database's library will be automatically and silently updated so long as security updates are turned on.

EFI, which stands for Extensible Firmware Interface, bridges a Mac's hardware, firmware, and operating system together to enable it to go from power-on to booting macOS.

macOS High Sierra will be publicly released on the Mac App Store later today.

Tags: EFI, Security
Related Forum: macOS High Sierra

Top Rated Comments

jsalda Avatar
106 months ago
Huh, I wonder what this will mean for Hackintosh?
Score: 14 Votes (Like | Disagree)
gpat Avatar
106 months ago
Huh, I wonder what this will mean for Hackintosh?
Probably nothing at all.
Will just make actual Macs more secure.
Score: 9 Votes (Like | Disagree)
craig1410 Avatar
106 months ago
This is great news as it should help to guard against any sort of tampering which might result through a bad actor having temporary physical access to a machine such as at a border security point.

I honestly don't believe that Hackintoshes are being targeted here but if increasing legitimate Mac security results in Hackintoshes having a few bumps in the road then so be it IMO.
Score: 7 Votes (Like | Disagree)
Onexy Avatar
106 months ago
Spoken like a government. This is probably not to fight malware but to fight hackintoshs.
Score: 6 Votes (Like | Disagree)
Cougarcat Avatar
106 months ago
This sounds like a way to get rid of Hackintoshes.
Huh, I wonder what this will mean for Hackintosh?
This doesn’t affect hackintoshes. HS is working on them just fine. (The Apple employee who posted the original tweets even said don’t send in your data if you’re on a hack, because it’s useless to them.)
Score: 6 Votes (Like | Disagree)
jblagden Avatar
106 months ago
('https://www.macrumors.com/2017/09/25/macos-high-sierra-weekly-efi-security-check/')


Mac users who upgrade to macOS High Sierra will benefit from a significant new security feature that works in the background.



macOS High Sierra automatically checks a Mac's EFI firmware against Apple's database of "known good" data to ensure it hasn't been tampered with, according to a series of tweets from an Apple engineer.

The tweets have since been deleted, but a summary remains available on the Mac blog The Eclectic Light Company ('https://eclecticlight.co/2017/09/24/high-sierra-automatically-checks-efi-firmware-each-week/').If the check fails, a prompt will appear with options to "Send to Apple" or "Don't Send." The selection is remembered in subsequent weeks.



The "eficheck" tool sends the binary data from the EFI firmware, and preserves user privacy by excluding data which is stored in NVRAM, according to The Eclectic Light Company. Apple will then be able to analyze the data to determine whether it has been altered by malware or anything else.

The database's library will be automatically and silently updated so long as security updates are turned on.

macOS High Sierra will be publicly released on the Mac App Store later today.

Article Link: macOS High Sierra Automatically Performs Security Check on EFI Firmware Each Week ('https://www.macrumors.com/2017/09/25/macos-high-sierra-weekly-efi-security-check/')
This sounds like a way to get rid of Hackintoshes.
Score: 6 Votes (Like | Disagree)

Popular Stories

iOS 26 Battery Glass Feature

iOS 26.1 Beta Liquid Glass Battery Drain Test: Tinted vs Clear Mode

Friday October 24, 2025 2:30 pm PDT by
In the fourth iOS 26.1 beta, Apple added a "Tinted" option that reduces the translucency of Liquid Glass for those who prefer a more opaque look. I saw some comments wondering whether the setting might preserve battery life, so I thought I'd do some testing. Test Settings I did four separate tests using the iPhone 17 Pro Max, and I kept the parameters as similar as possible. Here are the...
iOS 26

iOS 26.1 Coming Soon With These 8 New Features for Your iPhone

Wednesday October 22, 2025 6:15 am PDT by
The upcoming iOS 26.1 update includes a handful of new features and changes for iPhones, including a toggle for changing the appearance of the Liquid Glass design, "slide to stop" for alarms in the Clock app, and more. iOS 26.1 is currently in beta testing. The update will likely be released in the first half of November, and it is compatible with the iPhone 11 series and newer, but some...
iOS 26 Maps Glass

Apple Reportedly Moving Ahead With Ads in Maps App

Sunday October 26, 2025 6:22 am PDT by
Apple Maps could feature integrated ads as soon as next year, Bloomberg's Mark Gurman reports. In his latest "Power On" newsletter, Gurman said that Apple's plan to bring more ads to iOS is moving "gaining traction," with the Maps app being next in line. The project will apparently give restaurants and other businesses the option to pay to have their details featured more prominently in...
Emergency SOS via Satellite iPhone YT

iPhone 18 Pro Rumored to Support Full 5G Satellite Internet

Friday October 24, 2025 7:18 am PDT by
At least some new iPhone models launching next year may support full 5G satellite internet, according to a report this week from The Information. "Apple plans to add support in upcoming iPhones as early as next year for 5G networks that aren't tethered to Earth's surface, which includes satellites," the report said. "That would give the iPhone full internet access over satellite," it added. ...
trump white house ballroom

Apple Donating to Trump's $350M White House Ballroom Project

Thursday October 23, 2025 3:55 pm PDT by
Apple is one of several tech companies that will contribute to the construction of U.S. President Donald Trump's 90,000-square-foot ballroom, reports CNN. Construction began on the ballroom this week, and the White House's east wing was torn down. Trump claims that the ballroom will cost $350 million, and that it will be privately funded through donations. The cost has already increased $150 ...
iPhone 17 Colors

iPhone 18 Rumored to Feature 50% More RAM

Saturday October 25, 2025 2:57 am PDT by
Apple's upcoming iPhone 18 could feature 50% more memory than its predecessor, according to Korea's The Bell. With its latest iPhone lineup, the iPhone Air, iPhone 17 Pro, and iPhone 17 Pro Max feature 12GB of memory. This is a significant increase of 4GB more their predecessors, largely driven by the demands of on-device artificial intelligence processing. The iPhone 17 is the only new...
iOS 26

iOS 26.1 Coming Soon: New Features for Your iPhone and Release Date

Monday October 27, 2025 7:55 am PDT by
The upcoming iOS 26.1 update includes a handful of new features and changes for iPhones, including a toggle for changing the appearance of the Liquid Glass design, "slide to stop" for alarms in the Clock app, and more. Below, we outline key details about iOS 26.1. Release Date Given that Apple has yet to seed an iOS 26.1 Release Candidate, which is typically the final beta version, the...
All Screen iPhone 2027 Feature 1

Report: Apple to Skip 'iPhone 19' Name for 'iPhone 20'

Thursday October 23, 2025 4:28 am PDT by
Apple's new iPhone lineup launched in the fall of 2027 will be called the "iPhone 20" models, rather than the "iPhone 19," according to research firm Omdia. Speaking at a conference in Seoul (via ETNews), Omdia Chief Researcher Heo Moo-yeol corroborated rumors that Apple plans to move the launch of its standard iPhone to the first half of the year and provided some additional clarity about...
iOS 26 Feature

iOS 26 Leaker Being Sued by Apple is Actually a 'Lifelong Apple Fanboy'

Friday October 24, 2025 9:20 am PDT by
In July, Apple sued well-known YouTuber Jon Prosser and his acquaintance Michael Ramacciotti over alleged theft of the company's trade secrets, after Prosser leaked some iOS 26 details in videos uploaded to his YouTube channel Front Page Tech. If you are not caught up on the lawsuit, read our initial coverage to learn more. Earlier this week, Prosser told The Verge he has "been in active...