3 ms·
The attack as described is plausible on non-Apple hardware, provided that the system doesn't have UEFI Secure Boot enabled. If it does then you'd need a separat
by mjg59 12y ago
The attack as described is plausible on non-Apple hardware, provided that the system doesn't have UEFI Secure Boot enabled. If it does then you'd need a separate attack to circumvent the requirement for signed drivers.
Also worth mentioning that this isn't specific to Thunderbolt - Expresscard also breaks out PCIe to an externally-accessible port.
- pzb 12y agoI assume it was you that asked the question about Secure Boot at the end of this talk at 31C3?
- mjg59 12y agoYeah - after the previous day's discussion on how pretty much every existing Secure Boot implementation was vulnerable to kernel-level attack, it was nice to hear about something that was fully prevented by Secure Boot.