Anti-Piracy Message in Mac OS X Kernel Extension

Mar 19, 2010 - 4 Comments is a kernel extension that runs within Mac OS X, it’s function is thought to insure that Mac OS X is running only on certified Apple hardware.
dont steal mac os x kernel extension

You can see this kernel extension yourself by going to the Terminal and typing:

kextstat | grep "Dont_Steal"

Apparently the following message gets loaded into memory somewhere:

Your karma check for today:
There once was was a user that whined
his existing OS was so blind,
he’d do better to pirate
an OS that ran great
but found his hardware declined.
Please don’t steal Mac OS!
Really, that’s way uncool.
(C) Apple Computer, Inc.

I wonder if this is one of the kernel extensions that gets replaced or modified with various Hackintosh installs?

Enjoy this tip? Subscribe to the OSXDaily newsletter to get more of our great Apple tips, tricks, and important news delivered to your inbox! Enter your email address below:

Related articles:

Posted by: David Mendez in Mac OS X


» Comments RSS Feed

  1. loppysauce says:

    This is a bit humorous. Good find. does anyone know why Mac OS x kernel is putting up mass activity when utorrent is running?

  2. Galaxy says:

    On hackintoshes, that kext is responsible for doing the heavy lifting of decrypting the Apple Protected Binaries, however the actual keys are stored in a device called the SMC which is present only in Macs and is responsible for platform management like temps sensors etc. The trick is to emulate the whole device but provide only the necessary keys and a response when probed (to act like the actual device). Don’t Steal Mac OS X does the rest. Apple implemented this idea starting with Mac OS X Tiger 10.4.3 and onward. The actual key(s) stored in the SMC are: “ourhardworkbythesewordsguardedpleasedontsteal(c)AppleComputerInc”

  3. Charles White says:

    You can find it here.
    System/Library/Extensions/Dont Steal Mac OS X.kext

    When you find this file and select it. press ‘Command I’. Read up on what it does.

  4. lord_webi says:

    yes … this is the extension … the “Your Karma blabla …” ist the decrypt key from Apple … on this all the Hackintosh decrypters are working :-)

Leave a Reply


Shop on and help support OSXDaily!

Subscribe to OSXDaily

Subscribe to RSS Subscribe to Twitter Feed Follow on Facebook Subscribe to eMail Updates

Tips & Tricks


iPhone / iPad



Shop on Amazon to help support this site