3 ms·
> Quite frankly, I'm not worried about physical access being a "vulnerability" But it is. Imagine a dongle that installs a rootkit once you plug it in. And now
by dozzie 9y ago
> Quite frankly, I'm not worried about physical access being a "vulnerability"
But it is. Imagine a dongle that installs a rootkit once you plug it in. And
now give somebody your laptop to hold for a minute.
There were (still are?) very similar issues with Windows autorun on CDs and
pendrives.
- mycall 9y agoTo execute a rootkit, it would need to create a process in memory. Windows Defender would scan it and probably catch it in the act.
- kbenson 9y agoThe dongle actually doesn't have to install anything, just to know a bit about kernel memory structures or how to locate interesting portions of memory. Full read access means you're pretty much screwed if the entity has bad intentions. No root kit needed.
- darpa_escapee 9y agoWindows Defender or the OS can't do much to prevent a Thunderbolt device from directly accessing memory and doing whatever it wants.