Thunderclap hack makes Macs and PCs with Thunderbolt ports vulnerable

-

If you’ve bought a recently released MacBook, Windows laptop or really any PC equipped with a Thunderbolt port, there’s a new vulnerability you should watch out for.

The new vulnerability has been dubbed Thunderclap and it could leave computers open to serious attacks such as running malicious code on your system. This is on top of the usual, unwarranted access to important data like passwords, encryption keys and any other sensitive data stored on your system.

It’s really bad news mainly because Thunderbolt’s protocols are designed with OS-level access and direct-memory access (DMA) to support high-speed data transfer, video out and its other myriad features. This vulnerability takes advantage of all that high-level access to do more harm.

According to the group of researchers that announced Thunderclap at the Network and Distributed System Security Symposium in San Diego, the Thunderclap vulnerability won’t just affect the latest machines equipped with Thunderbolt 3, but older devices that provide Thunderbolt connectivity through DisplayPort instead of USB-C. 

Thunderclap will specifically affect “all Apple laptops and desktops produced since 2011 are vulnerable, with the exception of the 12-inch MacBook. Many laptops, and some desktops, designed to run Windows or Linux produced since 2016 are also affected." 

How to stay protected from Thunderclap

Now the good news is the team of researchers discovered the problem in 2016 and have been working with manufacturers to develop fixes ever since. 

MacBooks and other Apple computers running at least macOS 10.12.4 should be partially protected from the bug and newer updates should provide even better protection. Meanwhile, Windows 10 version 1803 provides firmware level protection for devices.

The best way to protect yourself from being Thunderclap-ped is to immediately update any computers you have with the latest version of their respective operating systems. Users who want that extra layer of protection can also disable Thunderbolt protocols in your computer's BIOS or UEFI settings.

For the most part, this probably won’t be a vulnerability that will affect most users as it can only be introduced directly through a device’s Thunderbolt port. Most users should be safe just by being vigilant about what they plug into their devices. 

Via The Verge

https://ift.tt/eA8V8J Thunderclap hack makes Macs and PCs with Thunderbolt ports vulnerable

Comments

Post a Comment

Popular posts from this blog

Bank Holiday sales 2020: laptop, headphone, iPad, and 4K TV deals continue this weekend

-
Bank holiday sales are continuing well into the weekend, with fantastic deals on top tech sticking around a little longer. That means there's more time to grab a bargain on a new laptop, iPad, 4K TV, or set of headphones, as well as big savings on home and garden renovations. We're rounding up all the latest bank holiday sales right here, so you can snag yourself a fantastic price on anything you're shopping for this weekend.  We're keeping this page topped up with regular updates on the best deals to hit the digital shelves this weekend. Plus, we've weeded out all the prices that aren't worth your time, and brought you the very best price cuts on offer. So bookmark this page and check back regularly, because we're scouring all your favourite retailers all weekend.  We've already seen some of these deals come and go, and with stock levels of particularly in-demand items (Nintendo Switch Lite, iPads, Apple Watches, and premium laptops) already shakey du
Read more

Similarweb web analytics tool

-
Image
You’ve done all the hard work of getting your new business off the ground, but the toil never seems to end. Between opening your store, launching your website, and everything else that comes with your entrepreneurial endeavors, where is there time to keep an eye on the competition?  While keeping your brand relevant can be achieved in more ways than one, staying up on the web activity, overall SEO , and site performance of you, your foes and familiars can help to let you know what’s working in the marketplace and what isn’t. But how does one even begin to hold a spyglass to these metrics? That’s what Similarweb is for. Interested in Similarweb? Check out the website here Launched in 2007, Similarweb is a digital intelligence software suite that provides web-tracking capabilities to its users, allowing businesses to keep tabs on web traffic, page performance, keyword optimization, and more. Whether you’re building a new website for a client or want to see how your own pages stack
Read more

Aldelo point of sale (POS) review

-
Image
Picking out the best POS system for your business can be a game-changer when you're looking to increase profits quickly. Aside from accepting multiple payment types, your team can also easily clock-in, create sales analytics reports, and add loyalty discounts whilst you oversee operations. As a business owner, you can use your POS system to keep a closer eye on the bottom line and integrate your sales station with pre-existing third-party technology and apps.  Aldelo POS system is one such game-changer for your business. Aldelo is a cloud-based POS system, developed specifically to be on the best restaurant POS systems around .  In this review, we'll run through Aldelo’s range of POS software options designed for restaurants, bars, and other food-related businesses. Unsure if Aldelo’s cloud-based POS products are right for your business? Keep reading to learn whether this restaurant-focused POS platform is a little too niche or the perfect POS provider for your requirem
Read more