Message from @Tervy

Discord ID: 552195045189746708


2019-03-04 18:17:32 UTC  

yeah it's called usb 4

2019-03-04 18:20:45 UTC  

maybe they better focus on the security breach that was detected on thunderbolt first, plugin and you got open access to all PCI-E lanes.. including those that controls SATA and network

2019-03-04 18:21:03 UTC  

@Tervy In addition, the USB Promoter Group announced the pending release of the USB4 specification, based on the Thunderbolt protocol. The convergence of the underlying Thunderbolt and USB protocols will increase compatibility among USB Type-C connector-based products, simplifying how people connect their devices.

2019-03-04 18:21:12 UTC  

even better news everything is going to have TB now :^)

2019-03-04 18:22:27 UTC  

@Tervy is that a security problem though

2019-03-04 18:22:34 UTC  

lots of interfaces have that "issue"/"feature"

2019-03-04 18:22:36 UTC  

firewire is a classic

2019-03-04 18:22:59 UTC  

barring that, plugging something into an actual PCIe slot

2019-03-04 18:23:30 UTC  

there's a cs go hardware hack that works through thunderbolt

2019-03-04 18:23:34 UTC  

(and pcie for that matter)

2019-03-04 18:23:46 UTC  

yeah because PCIe gets direct memory access

2019-03-04 18:23:55 UTC  

it's pretty easy to do tbh

2019-03-04 18:24:02 UTC  

just buy a PCIe fpga board

2019-03-04 18:24:06 UTC  

iirc that's what they actually used

2019-03-04 18:24:46 UTC  

prob

2019-03-04 18:25:33 UTC  

@Goz3rr it is on any IT-enviroment not so much at home

2019-03-04 18:25:35 UTC  

well

2019-03-04 18:25:45 UTC  

phones with Thunderbullshit

2019-03-04 18:25:58 UTC  

access to laptops hdds

2019-03-04 18:26:01 UTC  

work or home

2019-03-04 18:26:12 UTC  

looks like MS recently (as in last year) adde somethin

2019-03-04 18:26:22 UTC  

>This feature does not protect against DMA attacks via 1394/FireWire, PCMCIA, CardBus, ExpressCard, and so on.

2019-03-04 18:26:28 UTC  

lol

2019-03-04 18:26:29 UTC  

this also includes U.2, M.2, etc probably

2019-03-04 18:26:38 UTC  

because all of those just expose actual PCI(e) lanes

2019-03-04 18:26:41 UTC  

yeah but you need a screwdriver for that

2019-03-04 18:26:48 UTC  

i think some devices have external U.2 ports

2019-03-04 18:27:14 UTC  

very differenbt to just plugging what looks like jhust a big usb stick in

2019-03-04 18:27:40 UTC  

i was more thinking about someone who intentionally plugs something bad it

2019-03-04 18:27:43 UTC  

not a retarded user

2019-03-04 18:28:08 UTC  

``` To make things easier, the USB-IF also has recommended names for companies to market these three specs with: SuperSpeed USB, SuperSpeed USB 10Gbps, and SuperSpeed USB 20Gbps. The group also requests that other names, like “SuperSpeed Plus, Enhanced SuperSpeed and SuperSpeed+,” which had been previously used in the 3.0 and 3.1 standards era, “are not intended to be used in product names, messaging, packaging or any other consumer-facing content.” Although it’ll be up to companies to listen and follow those guidelines accordingly. ```

2019-03-04 18:28:10 UTC  

oh boy

2019-03-04 18:28:16 UTC  

yeah

2019-03-04 18:28:17 UTC  

usb

2019-03-04 18:28:21 UTC  

need to hire a branding team

2019-03-04 18:28:26 UTC  

or just contract it out

2019-03-04 18:28:38 UTC  

nah just everyone on their forums needs to be banned from writing standards for life

2019-03-04 18:29:14 UTC  

but yeah i can easily see malicious app abusing thunderbullshit to nigger data