Thunderbolt has seven vulnerabilities that cannot be patched on older PCs and Laptops

Discussion in 'Frontpage news' started by Hilbert Hagedoorn, May 11, 2020.

  1. Hilbert Hagedoorn

    Hilbert Hagedoorn Don Vito Corleone Staff Member

    Messages:
    40,594
    Likes Received:
    8,969
    GPU:
    AMD | NVIDIA
    DeskStar and BetA like this.
  2. DeskStar

    DeskStar Maha Guru

    Messages:
    1,135
    Likes Received:
    174
    GPU:
    EVGA 2080Ti/3090FTW
    Daaaaaaaaaaaamn. Glad it needs to be accessed locally from the actual machine. Just a bit more security issue icing on the cake for Intel....

    Wonder if this is something that will effect my eventual purchase of my thunderbolt AIC for my tRX40 Aorus Xtreme? Not like someone is going to go out of their own way to come into my house and grab my not so sensitive data...

    You have a better chance if any (good luck) to get through the network first at my place. Otherwise peeps would be met with a 12 GAUGE or a .45 to the face.
     
    Last edited: May 11, 2020
  3. The Goose

    The Goose Ancient Guru

    Messages:
    2,700
    Likes Received:
    169
    GPU:
    MSIrtx3070 gaming X
    Oh, yeah i need to take a dump too lol.
     
  4. tsunami231

    tsunami231 Ancient Guru

    Messages:
    11,497
    Likes Received:
    793
    GPU:
    EVGA 1070Ti Black
    I dare some security firm and who ever else is purposely look for flaws to out go take intels 286/386/486 cpu along with amd first offering and look for flaws in them too....

    Instead of Witch Hunts we have Flaw hunts. I have seen or heard of some many "flaws" and "security" holes in computer tech as I have in past few years since meltdown and spectre started all this
     
    barbacot likes this.

  5. barbacot

    barbacot Master Guru

    Messages:
    525
    Likes Received:
    460
    GPU:
    Asus 3080 Strix OC
    Yeah, right...
    Five minutes AND A SCREWDRIVER and I can steal you hdd and key your display with a message that I was there...
    It is a capital rule in it security to not allow unsupervised physical access no matter how secure are the systems - even without this "vulnerability".
     
  6. Reddoguk

    Reddoguk Ancient Guru

    Messages:
    2,060
    Likes Received:
    252
    GPU:
    RTX3090 GB GamingOC
    Omg that's shocking ^^. Although i have no idea what a Thunderbolt even is. It's either a thunder clap or a lightning bolt.
     
  7. barbacot

    barbacot Master Guru

    Messages:
    525
    Likes Received:
    460
    GPU:
    Asus 3080 Strix OC
    In the beginning...It was "something" that only Apple initiates knew what it was...PC peasants were left to wallow in the murky waters of the USB ocean of sorrow...
     
    Last edited: May 11, 2020
  8. schmidtbag

    schmidtbag Ancient Guru

    Messages:
    5,744
    Likes Received:
    2,190
    GPU:
    HIS R9 290
    Doesn't TB have direct PCIe access? I thought it was obvious from day 1 that it had security vulnerabilities.

    Regardless, I'm getting rather bored of these "physical access vulnerabilities". They're meaningless and distracting us from the more severe remote-access threats.
     
    Last edited: May 12, 2020
    chanw4 and DeskStar like this.
  9. Fender178

    Fender178 Ancient Guru

    Messages:
    4,184
    Likes Received:
    207
    GPU:
    GTX 1070 | GTX 1060
    Heh another useless vulnerability because the hacker would have to steal the laptop to be able to use it. It's much more simple to steal a hard drive/SSD
    Exactly. It's like that case fan vulnerability which hackers can use for something but the data transfer rate is so slow it's even worth doing.
     
  10. Texter

    Texter Ancient Guru

    Messages:
    3,156
    Likes Received:
    238
    GPU:
    Club3d GF6800GT 256MB AGP
    They're very, very frightening iirc...
     
    Reddoguk likes this.

  11. HeavyHemi

    HeavyHemi Ancient Guru

    Messages:
    6,955
    Likes Received:
    960
    GPU:
    GTX1080Ti
    No really....
    Thunderbolt Security Issues
    Figuring out yet another way is not really new news. It's just a variant on the same old, same old.
     
  12. Venix

    Venix Ancient Guru

    Messages:
    1,591
    Likes Received:
    607
    GPU:
    Palit 1060 6gb
    A lot of people at the office go to launch using their laptops etc completely unsupervised... They will also pick a flash drive they found on the road to see what .... TREASURE they found .... I guess the biggest security issue is the people first!
     
  13. Reddoguk

    Reddoguk Ancient Guru

    Messages:
    2,060
    Likes Received:
    252
    GPU:
    RTX3090 GB GamingOC
    They ripped the name from a Queen song, lawsuit inc^^......
     
  14. dragonlord

    dragonlord Member Guru

    Messages:
    154
    Likes Received:
    14
    GPU:
    Nvidia Beta Tester
    So, Microsoft was right about TB being vulnerable -- which is why they stated a little while ago that they weren't using TB in the Surface products. Good on them!
     
  15. alanm

    alanm Ancient Guru

    Messages:
    10,094
    Likes Received:
    2,238
    GPU:
    Asus 2080 Dual OC
    Thunderbolt vulnerability is irrelevant compared to what can be done to your PC by someone with 5 min and a screwdriver.
     

  16. Fox2232

    Fox2232 Ancient Guru

    Messages:
    11,717
    Likes Received:
    3,319
    GPU:
    6900XT+AW@240Hz
    Well, idea is to bypass physical security. (Business use cases have drives encrypted, therefore eliminating user login without need to shut down laptop is serious.)
    Would it require shutdown of laptop, then he would not get through boot encryption.
    It definitely has its uses.

    But if he could do it without actually accessing flash for thunderbolt by connecting external device to TB port, that would have been really serious problem.

    @alanm : Like nothing? Those hacks are not for purpose of unlocking laptop belonging to your wife. It is to steal PI/SPI and business secrets.
    And those who have such data on mobile device have it encrypted. If not, then company enabling employee to use such insecure storage method gets what it deserves.
     
  17. 0blivious

    0blivious Ancient Guru

    Messages:
    3,109
    Likes Received:
    605
    GPU:
    5700XT / GTX1070
    This seems to be one of those flaws that you would have to be specifically targeted for. The equipment required to do this isn't cheap and the opportunity to do so requires alone time with the device.

    This is a problem for businesses and governments but for the average person, this flaw appears trivial at best.
     
  18. Picolete

    Picolete Master Guru

    Messages:
    320
    Likes Received:
    99
    GPU:
    R9 290 Sapphire Tri-x
    Lol, a couple of years ago i said this will happend, similar problems to what firewire had
     

Share This Page