App Review Thunderspy PoC demo 1: Unlocking Windows PC in 5 minutes

[[correlate]]

Content source

https://www.youtube.com/watch?v=7uvSZA1F9os&feature=emb_logo

 

[HarborFront]

Spycheck, a free and open-source tool, to determine if your system is vulnerable. If it is found to be vulnerable, Spycheck will guide you to recommendations on how to help protect your system. Download from below

Thunderspy - When Lightning Strikes Thrice: Breaking Thunderbolt 3 Security

In short,

Systems purchased before 2019:
No fix is available. For recommendations on how to help protect your system, please refer to protections against Thunderspy.

Systems purchased in or after 2019:
Your system might support Kernel DMA Protection, which partially mitigates Thunderspy. For instructions on how to verify whether your system ships this protection, please refer to Kernel DMA Protection.

Quote

Update 5/11/2020 3:13 PM ET: Intel has confirmed that the attack doesn’t work on computers that do have Kernal DMA protection enabled. “This attack could not be successfully demonstrated on systems with Kernel DMA protection enabled. As always, we encourage everyone to follow good security practices, including preventing unauthorized physical access to computers,” a spokesperson told Engadget in a statement. In addition, Intel has released a blog post giving its own perspective on the issue.

Unquote

Thunderbolt flaw lets hackers steal your data in 'five minutes'

Attackers can steal data from Thunderbolt-equipped PCs or Linux computers, even if the computer is locked and the data encrypted, according to security researcher Björn Ruytenberg.

www.engadget.com

 

[cruelsister]

Give me half the physical access time and I would own the system also.

Without the need for a screwdriver

 

[bribon77]

Give me half the physical access time and I would own the system also.

Without the need for a screwdriver

Give me a screwdriver and I'll take the hard drive in three minutes.

 

[blackice]

I don’t want any of you near my computers!