Originally Posted By: joemikeb
NOTE: Beginning with High Sierra (MacOS 10.13) Apple does NOT permit a surface scan of the boot drive.

Thinking about it, I'm now wondering whether Apple's prohibition is on only whatever variety of surface scan TTP, etc. run, but not on the "dd" command we're discussing.

ryck's error "dd: /dev/rdisk1: Operation not permitted" suggests that "dd" is permissible...that it's "/dev/rdisk1" that's a no-go.

Maybe the command must be run separately on the HDD and SSD portions of a FD, but if that's the case, it seems like "diskutil list" should provide the necessary info.


The new Great Equalizer is the SEND button.

In Memory of Harv: Those who can make you believe absurdities can make you commit atrocities. ~Voltaire