![[correlate]](/data/avatars/m/79/79653.jpg?1556985072){kind=avatar}
- Content source
- https://www.youtube.com/watch?v=7uvSZA1F9os&feature=emb_logo
Software Review Thunderspy PoC demo 1: Unlocking Windows PC in 5 minutes
-
![[correlate]](/data/avatars/s/79/79653.jpg?1556985072)
Thread starter
[correlate]
- Start date
- 4 Replies
- 1,857 Views
Reviews reflect the reviewer's setup and methods. Check the evidence and limitations.
Spycheck, a free and open-source tool, to determine if your system is vulnerable. If it is found to be vulnerable, Spycheck will guide you to recommendations on how to help protect your system. Download from below
In short,
Systems purchased before 2019:
No fix is available. For recommendations on how to help protect your system, please refer to protections against Thunderspy.
Systems purchased in or after 2019:
Your system might support Kernel DMA Protection, which partially mitigates Thunderspy. For instructions on how to verify whether your system ships this protection, please refer to Kernel DMA Protection.
Quote
Update 5/11/2020 3:13 PM ET: Intel has confirmed that the attack doesn’t work on computers that do have Kernal DMA protection enabled. “This attack could not be successfully demonstrated on systems with Kernel DMA protection enabled. As always, we encourage everyone to follow good security practices, including preventing unauthorized physical access to computers,” a spokesperson told Engadget in a statement. In addition, Intel has released a blog post giving its own perspective on the issue.
Unquote
www.engadget.com
In short,
Systems purchased before 2019:
No fix is available. For recommendations on how to help protect your system, please refer to protections against Thunderspy.
Systems purchased in or after 2019:
Your system might support Kernel DMA Protection, which partially mitigates Thunderspy. For instructions on how to verify whether your system ships this protection, please refer to Kernel DMA Protection.
Quote
Update 5/11/2020 3:13 PM ET: Intel has confirmed that the attack doesn’t work on computers that do have Kernal DMA protection enabled. “This attack could not be successfully demonstrated on systems with Kernel DMA protection enabled. As always, we encourage everyone to follow good security practices, including preventing unauthorized physical access to computers,” a spokesperson told Engadget in a statement. In addition, Intel has released a blog post giving its own perspective on the issue.
Unquote
Thunderbolt flaw lets hackers steal your data in 'five minutes' - Engadget
Attackers can steal data from Thunderbolt-equipped PCs or Linux computers, even if the computer is locked and the data encrypted, according to security researcher Björn Ruytenberg.
www.engadget.com
Give me half the physical access time and I would own the system also.
Without the need for a screwdriver
Without the need for a screwdriver
Give me a screwdriver and I'll take the hard drive in three minutes.
Recently browsing
Members who viewed this thread in the last 5 minutes
