there's a cs go hardware hack that works through thunderbolt

(and pcie for that matter)

yeah because PCIe gets direct memory access

it's pretty easy to do tbh

just buy a PCIe fpga board

iirc that's what they actually used

https://github.com/ufrisk/pcileech

prob

@Goz3rr it is on any IT-enviroment not so much at home

well

phones with Thunderbullshit

access to laptops hdds

https://docs.microsoft.com/en-us/windows/security/information-protection/kernel-dma-protection-for-thunderbolt

work or home

looks like MS recently (as in last year) adde somethin

>This feature does not protect against DMA attacks via 1394/FireWire, PCMCIA, CardBus, ExpressCard, and so on.

lol

this also includes U.2, M.2, etc probably

because all of those just expose actual PCI(e) lanes

yeah but you need a screwdriver for that

i think some devices have external U.2 ports

very differenbt to just plugging what looks like jhust a big usb stick in

i was more thinking about someone who intentionally plugs something bad it

not a retarded user

``` To make things easier, the USB-IF also has recommended names for companies to market these three specs with: SuperSpeed USB, SuperSpeed USB 10Gbps, and SuperSpeed USB 20Gbps. The group also requests that other names, like “SuperSpeed Plus, Enhanced SuperSpeed and SuperSpeed+,” which had been previously used in the 3.0 and 3.1 standards era, “are not intended to be used in product names, messaging, packaging or any other consumer-facing content.” Although it’ll be up to companies to listen and follow those guidelines accordingly. ```

oh boy

yeah

usb

need to hire a branding team

or just contract it out

nah just everyone on their forums needs to be banned from writing standards for life

but yeah i can easily see malicious app abusing thunderbullshit to nigger data

on almost all enviroments

considering how easy its these days just buy app makers

waiting for the day we be seeing intel ME based cheats <:alismirk:230784726615588865>

"hey remember me the lone calculator app what you installed once and never deleted, now im your worst nightmare only due someone bought me or stole the access for gayplay account and now inserted simple update malware on me" scenario

i suspect people will just disable thunderbolt

tbh

https://thunderclap.io/#faq

guys buy a g pro wireless now

its amazing