In principle this could be mitigated with a suitably programmed IOMMU which can limit the operations that a DMA capable device (e.g. on the other side of the Th

In principle this could be mitigated with a suitably programmed IOMMU which can limit the operations that a DMA capable device (e.g. on the other side of the Thunderbolt connector) can do with your main memory. Traditionally they are used when you have an operating system running in a virtual machine, but you want (for whatever reason) give it hardware access to a PCI card. Without the IOMMU, the virtual machine could program, e.g. a network card to read/write to memory that belongs to the host operating systems, hence breaking free of the virtualization jail. But, as far as I know, it was also possible to limit DMA in firewire controllers. Was that implemented in practice? I don't know. So will it be done for Thunderbolt-Enabled computers?