Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Thunderbolt flaws affect millions of computers – even locking unattended devices won't help
ZDNet ^ | May 11, 2020 | By Liam Tung

Posted on 05/11/2020 9:07:49 AM PDT by Swordmaker

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-36 last
To: Swordmaker; dayglored
____________vulnerability that cannot be fixed...BUT requires physical access to your computer to exploit..

Oh dear, another panic. Whatever shall I do? /sarc

This stuff is becoming a cliche.

Maybe we need a keyword for computer clickbait, eh?

21 posted on 05/11/2020 10:04:41 AM PDT by Unrepentant VN Vet (Never quit anything in my life, ain't going to start quitting now. WWG1WGA)
[ Post Reply | Private Reply | To 4 | View Replies]

To: John Milner

+1


22 posted on 05/11/2020 10:07:05 AM PDT by grey_whiskers (The opinions are solely those of the author and are subject to change with out notice.)
[ Post Reply | Private Reply | To 14 | View Replies]

To: Swordmaker

This has been another Intel (they designed it) security issue for some time. The OEM’s (Dell, HP, Lenovo) all run bios/uefi security settings that you can enforce for thunderbolt. It’s hilarious that for once Microsoft comes down on the secure side of this. I firmly believe they only bailed on using it for the Surface line because they didn’t want to pay the licensing fees.
You can run bitlocker @256bit or Apple encryption, but I believe what they are concerned about is being able to intercept it by spoofing an approved hardware address (on the bus), just as your machine could send data freely to another authenticated device over thunderbolt.
I’m sure Intel will issue patched microcode to the OEM’s within a few weeks to address it.


23 posted on 05/11/2020 10:08:03 AM PDT by miliantnutcase
[ Post Reply | Private Reply | To 8 | View Replies]

To: Fury

gets into our telecomm rooms without approval from me or someone in my chain-of-command. I don’t care what they say or who they claim to be


Back when I was installing telephone systems it was common to put all the system on a floor in the same hallway equipment room. We had access to everyone system as well as all their lines. Usually the doors were left unlocked. Different times

Other then our tool belts we could have been someone off the street. It amazing where you could go by just wearing a tool belt and carrying a clipboard with a work order


24 posted on 05/11/2020 10:14:57 AM PDT by CIB-173RDABN (I am not an expert in anything, and my opinion is just that, an opinion. I may be wrong.)
[ Post Reply | Private Reply | To 20 | View Replies]

To: Swordmaker
Thunderstruck by Steve'n'Seagulls (LIVE)

Thunderstruck by Steve'n'Seagulls (LIVE)

25 posted on 05/11/2020 10:18:34 AM PDT by SunkenCiv (Imagine an imaginary menagerie manager imagining managing an imaginary menagerie.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Swordmaker; dayglored
"THUNDERSTRUCK".

-------Good one. . . Perhaps it was already taken.

Try this. Thunderstruck 2 cellos

26 posted on 05/11/2020 10:18:42 AM PDT by itsahoot (Welcome to the New USA where Islam is a religion of peace and Christianity is a mental disorder.)
[ Post Reply | Private Reply | To 17 | View Replies]

To: Swordmaker

I looked at the details.
Someone needs to physically at your computer to even try to implement it.
Ms Kimber doesn’t let strangers in my home.

Thunderbolt 3 is an extension to the PCI-e bus.
Imagine a expansion slot in your PC, shrank down to a very small connector.

Just about anything which can be placed in an expansion slot, can be placed on Thunderbolt 3.
A subset of that is USB-c, which I use to drive my monitor, keyboard and mouse.
The advantage is its ONE cable instead of 3-10.

Wise security practice, you don’t go plugging thumb drives into a USB port unless you know exactly what is on it.
Kind of like sharing condoms....not a good idea and more than a bit icky!


27 posted on 05/11/2020 10:20:50 AM PDT by Zathras
[ Post Reply | Private Reply | To 1 | View Replies]

To: grey_whiskers

LOL!!


28 posted on 05/11/2020 10:21:42 AM PDT by SunkenCiv (Imagine an imaginary menagerie manager imagining managing an imaginary menagerie.)
[ Post Reply | Private Reply | To 7 | View Replies]

To: Zathras

So all that needs to occur is a wireless-commo’d device plugged into the T-Bolt USB-C? Hack the device into the puter?


29 posted on 05/11/2020 10:43:20 AM PDT by SgtHooper (If you remember the 60's, YOU WEREN'T THERE!)
[ Post Reply | Private Reply | To 27 | View Replies]

To: Swordmaker

Thunderbolt? I remember it as a neo-Nazi newspaper in the ‘70s.


30 posted on 05/11/2020 10:49:06 AM PDT by PAR35
[ Post Reply | Private Reply | To 1 | View Replies]

To: miliantnutcase
I’m sure Intel will issue patched microcode to the OEM’s within a few weeks to address it.

According to the article the problem is in the hardware and no software fix can fix it without a complete redesign of the silicon. Perhaps that’s true, perhaps not.

31 posted on 05/11/2020 10:55:05 AM PDT by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplophobe bigot!)
[ Post Reply | Private Reply | To 23 | View Replies]

To: SunkenCiv

Awesome!


32 posted on 05/11/2020 11:01:21 AM PDT by caver
[ Post Reply | Private Reply | To 25 | View Replies]

To: dayglored

Thanks for the ping, but the closest app to Thunderbolt that I have is Thunderbird.


33 posted on 05/11/2020 11:12:30 AM PDT by daniel1212 (To Go Paper Cups & Lids, 16 Oz, 20 Count (3 pack) Great Value To Go Paper Cups &)
[ Post Reply | Private Reply | To 11 | View Replies]

To: Swordmaker

So I also heard that Lenovo received flawed thunderbolt controllers for nearly their entire laptop line. I think the issues go really deep with Intel’s architecture.


34 posted on 05/11/2020 11:19:37 AM PDT by miliantnutcase
[ Post Reply | Private Reply | To 31 | View Replies]

To: CIB-173RDABN
Back when I was installing telephone systems it was common to put all the system on a floor in the same hallway equipment room. We had access to everyone system as well as all their lines. Usually the doors were left unlocked. Different times

Ala Mission Impossible. The IMF force operative just walked down the hall, opened the equipment door and there was the building’s phone patch panel, no matter how secure the facilities were supposed to be, hook in a few alligator clips, hook up to his fancy gadgets, and they were in, ready for spoofing the bad guys! LOL!

35 posted on 05/11/2020 11:37:28 AM PDT by Swordmaker (My pistol self-identifies as an iPad, so you must accept it in gun-free zones, you hoplophobe bigot!)
[ Post Reply | Private Reply | To 24 | View Replies]

To: Fury
I have advised our custodial staff - that no one, NO ONE - gets into our telecomm rooms without approval from me or someone in my chain-of-command. I don't care what they say or who they claim to be.

Yep. It's a problem when telecomm racks are in a large I.T. computer facility with a mix of other computers. One time I was working on an important project for a major police department, and needed to test connectivity to remote police stations. The router manager was an ah*le and refused to allow me the connectivity through his routers (I was the former router manager several guys before him and knew what I was doing). I and another guy on my team pulled the floor tiles, and pulled cables between our equipment and outgoing equipment, completely bypassing the highly-secured routers. We did our testing, then removed the cables, no one the wiser. Enough knowledge and you can get around security.

That router guy was later fired, and jailed, for refusing access needed by police brass and mayor's office. Too anal!

36 posted on 05/11/2020 12:18:04 PM PDT by roadcat
[ Post Reply | Private Reply | To 20 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-36 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson