3 ms·
If we banned the hotplug of new devices when the system is in a locked state, would that be sufficient to mitigate these attacks via system buses with DMA acces
by pja 12y ago
If we banned the hotplug of new devices when the system is in a locked state, would that be sufficient to mitigate these attacks via system buses with DMA access?
"No password? No hotplug for you." seems like a rule we ought to be enforcing.
- MrBuddyCasino 12y ago"Note: Mavericks since 10.8.2 on Ivy Bridge (>= 2012 Macs) have enabled VT-D effectively blocking DMA requests and thwarting almost all modules." Looks like newer models have fixed it, but your suggestion would probably be nice for older systems.
- epochwolf 12y agoPer the article: If you have a OF/EFI firmware password set on the target Mac OS X, FireWire DMA is off by default.