I received a brand new Mac laptop for work that is basically ours and doesn’t have to be returned, even after quitting. It was inside the box and sealed. I was wondering if Apple supplies and installs hardware keyloggers. The Apple manafacturers are the only ones with physical contact with the laptop. Is that possible? Otherwise, I know about DEP (Device Enrolment Program).
closed as unclear what you're asking by PwdRsch, Polynomial, Xander, Teun Vink, Jeroen Mar 20 at 6:34
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
There is no evidence that Apple has ever installed a hardware keylogger into any of their products. I can find no reference to such a feature or option existing or being advertised, either for consumer or commercial purposes. Further, it seems highly unlikely that a hardware vendor would embark on such an ethically questionable course of action against their own products and customers; it would reflect exceedingly poorly upon them.
This is not to say that a company could not have installed keylogging software after they received the laptop. However, I find it hard to believe that they would install a hardware keylogger - for a start, modern MacBooks are difficult to disassemble without damage. In this situation, formatting the disk and re-installing the OS should be sufficient to ensure that the device is clean.
DEP is a confusing acronym here; I suggest against using it as for 99% of cases it refers to Data Execution Prevention, which is an exploit mitigation in most operating systems. I'll assume that you're referring too Apple Device Enrolment Program.
ADEP is a mobile device management (MDM) solution. Organisations can indeed use it to deploy any software they like to their devices. If you re-install the operating system, however, the ADEP settings and deployed software packages are not carried over and the enrolment stops working for that device.