Thunderbolt ports may put your PC in jeopardy,Dubbed but only if you leave it alone with a capable and well-prepared hacker.
That's according to security researcher Björn Ruytenberg from the Eindhoven University of Technology, who outlined seven vulnerabilities in Thunderbolt, collectively called Thunderspy, in a recent paper (via Wired). The vulnerabilities are serious — a hacker who knows what they are doing could gain full access to data on a laptop that's locked and encrypted.
Laptops made before 2019 with Thunderbolt ports running Windows and Linux are vulnerable. Macs built before 2019 are a little safer, as an attacker would have to use another attack in conjunction with Thunderspy to gain access. The researcher claims the bugs cannot be fixed via a software update.
Pulling off the attack isn't easy, though. The hacker needs physical access to the machine, so they can unscrew it and attach a device to it (see Ruytenberg's video below).
Thunderbolt is a practical hardware interface as it allows for high-speed data transfer as well as charging, and it's compatible with USB-C. It was first introduced on Apple's MacBook Pro in 2011.
Thunderbolt is Intel's standard, and the company issued a response Sunday, claiming that a new security scheme called Kernel Direct Memory Access (DMA) has been implemented since 2019, protecting from these types of attacks. In his paper, Ruytenberg says that "systems supporting Kernel DMA Protection in place of Security Levels, released from 2019 onward, are currently subject to further investigation."
SEE ALSO: Apple launches 13-inch MacBook Pro with Magic Keyboard, new processorThunderbolt came under scrutiny in 2019, when security experts outlined a number of security vulnerabilities under the collective name Thunderclap, which also allow attackers with physical access to a PC to compromise its security. It's worth noting that Microsoft's recently launched Surface devices do not support Thunderbolt, allegedly due to security concerns.
Topics Cybersecurity
Epic Systems v. The Work Force
The Musk of Success
Repair Work
The Saran-Wrapped Soul
Not a Revolution
Going Underground: Notes from the People’s Summit
The Ministry of Politainment
Poodles, doodles, and memory-challenged gnomes
Motherhood!
A very special Trump supporter, a happy anniversary for workers
Tesla addresses security concerns over Sentry Mode in China · TechNodeTesla plans to roll out Full SelfGet up to 57% off Anker charging accessories at AmazonGet a fourLi Auto aims to surpass BMW, Mercedes, and Audi in sales in China by 2024 · TechNodeTrump's science adviser pick is actually a good scientistTME's Q2 revenue rises 5.5% despite weakened live streaming services · TechNodeAmazon deals of the day: 40Watch as SpaceX launches, then lands another Falcon 9 rocketNASA study says setting off bombs over Mars isn't the best ideaSF Express joins live commerce wave as it chases new revenue stream · TechNodeTSMC cuts price of its 8What is National Boyfriend Day and when is is celebrated?How to watch 'Argylle': When and where is it streaming?OPPO to use AI model to enhance SiriZeekr unveils new pictures of its first supercar with carbon ceramic brakes · TechNodeGaming emulators are now on the App Store after Apple relaxed the rulesHow to share your Google calendarTesla wins case against Tesila Beer following trademark dispute · TechNodeAmazon deals of the day: Sony WF Chrissy Teigen and John Legend continued to be irritatingly cute at the Oscars Everyone is having a field day with news that Trump is skipping the Correspondents' Dinner Your guide to the 2017 Oscars, in highly accurate charts Google, Facebook are tracking your WebMD health searches Hackers can easily steal passport photos from vulnerable UK Brexit app, report claims Google Maps adds button to translate addresses and directions 'Moana' star gets whipped in head with a flag mid All hail Viola Davis, queen of the post Elon Musk mistakenly thinks Neuralink brain chip could 'cure' autism 'The Mandalorian' episode 2 is a perfect Star Wars tone poem What the critics are saying about 'Frozen 2' How to predict the president's next bogus tweet: Just watch Fox News Everything to know about Disney Channel's truly wild original movies (DCOMs) Why the "imminent" Brunt iceberg hasn't cracked off yet Disney XD sprinkles a same Chrissy Teigen makes sure everyone knows John Legend didn't win an Oscar (this year) This seal delightedly hugging a toy version of itself is your new wallpaper Hate crime murders rose in 2018, according to new FBI data Disney+ will fix 'The Simpsons' aspect ratio woes in early 2020 Beyoncé's mom accidentally went live on Instagram and we have so many questions
