Go Back   DaemonForums > DaemonForums.org > News

News News regarding BSD and related.

Thread Tools Display Modes
  #1   (View Single Post)  
Old 25th February 2011
J65nko J65nko is offline
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 4,133
Default Security concerns over new Thunderbolt I/O technology

From http://www.h-online.com/security/new...y-1198476.html

Unlike such technologies as USB, Thunderbolt doesn't use a master/slave concept in which the PC controls communication. Rather, the new technology's concept is similar to that of Firewire, where a connected device can access a PC's working memory, for instance via DMA. Researchers such as those working in forensics have for some time taken advantage of this to create memory maps of the PCs they investigate. Vendor HBGary, for example, who was recently compromised by Anonymous, provided the US authorities with a framework that allows spyware to be injected into an unprotected but locked notebook via the Firewire port.
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
  #2   (View Single Post)  
Old 25th February 2011
BSDfan666 BSDfan666 is offline
Real Name: N/A, this is the interweb.
Join Date: Apr 2008
Location: Ontario, Canada
Posts: 2,223

Indeed, I was reading about this.. it seems to be just a PCIe bus, not sure how it's isolated.
Reply With Quote

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Security by default bettyblue OpenBSD Security 4 30th May 2010 08:30 PM
Virtualization security J65nko General software and network 2 16th February 2010 01:30 AM
NetBSD New security advisories J65nko News 0 16th January 2010 12:05 PM

All times are GMT. The time now is 04:19 AM.

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick