$300 Thunderbolt device can unlock any mac
this new device made by the Swedish hacker Ulf Frisk – FileVault2 let attackers with physical access to any mac retrieve the password and unlock your computer.
this tools will work plugging into any device locked or sleeping mode. The password may be used to unlock the mac to access everything on it.
Anyone including, but not limited to, your colleagues, the police, the hackers and the thief will have full access to your data as long as they can gain physical access – unless the mac is completely shut down. If the mac is sleeping it is still vulnerable.
How to use this tool:
Just plug the device up to a locked mac, plug in the Thunderbolt device, force a reboot ctrl+cmd+power and wait for the password to be displayed in less than 30 seconds!
https://www.youtube.com/watch?v=n_3eIFMR46Y
if you want try yourself here all details will need for hardware and software password recovery for mac.
Download PCILeech from Github and purchase the hardware. Password recovery have been tested and found to work on multiple macbooks and macbook airs (all with Thunderbolt 2). The attack is not tested on more recent macs with USB-C.
source :
http://blog.frizk.net/2016/12/filevault-password-retrieval.html
