危险外围设备:了解Thunderspy

图片


年复一年,我们目睹了技术的进步:计算机能力的增长,数据传输速度的提高,新标准的出现……但是,正如在一部著名电影中所说的那样,巨大的责任伴随着巨大的力量!我们从新标准和接口(除了高速)还能得到什么?Thunderbolt和USB4面临哪些威胁?正如他们所描述的那样,雷电危险吗?让我们弄清楚!


:


«» : . , , , . : , - , «» , . :


图片


, Intel 8086, , - (Input/Output, I/O). I/O, «IO/M», . 0x0000 0xFFFF:


图片


I/O- x86 x86-64. , I/O- in out:


图片


I/O- , :


  • PS/2;
  • RTC – ;
  • COM- LPT-;
  • IDE- .

: DMA


, - : I/O- -, in 32 . . !
(Direct Memory Access, DMA). , , :


图片


, (USB, SATA, NVMe, Wi-Fi):


图片


DMA-


, , . , , , . , – , , PCI Leech:


图片


DMA- . PCI PCI Express, DMA, , . DMA- IEEE 1394 (FireWire), :


图片


Thunderbolt


Thunderbolt. Thunderbolt- PCI Express: PCI Express .
- :


图片


… PCI Express:


图片


, , Thunderbolt-, ! .


Thunderbolt . , . , BIOS, :


  • (SL0);
  • (SL1, SL2);
  • (SL3).

图片


User Authorization (SL1), Windows :


图片


, .


I/O MMU


, – « – »? Apple, Thunderbolt. Thunderbolt- MacBook iMac , .


图片


I/O MMU (Input/Output Memory Management Unit), .


, – DMA-. PCI Express , I/O MMU «» , . I/O MMU .


图片


Apple Microsoft . 2019 « DMA », Thunderbolt- BIOS.


Thunderspy – !


, Thunderbolt Thunderspy. Thunderbolt - . , .


1.


- Thunderbolt 3 , USB Type C Power Delivery (PD):


图片


, ! , Thunderbolt No Security, .


Thunderbolt Controller Firmware Patcher, . .


, . – , PCI Express , .


2.


«» , . Secure Connect UUID SL2 ( ).


图片


, Thunderbolt- . Thunderbolt 3 UUID . Thunderbolt 3 128- UUID:


图片


64- UUID Thunderbolt 2 UUID DROM, 128- : DROM .


3.


Thunderbolt- (, , ) DROM, :


图片


«» Thunderbolt-, , .


, Thunderbolt, – Thunderclap. , Apple MacOS « » Thunderbolt- . , (Apple ID Thunderbolt-? ?).


PCI-Express-. DROM , , .


4. Thunderbolt 1 2


№ 2, Thunderbolt 3 ( UUID) Thunderbolt 2. UUID , , , .


, .


5. Thunderbolt


Thunderbolt- UEFI:


图片


UEFI , BIOS . , BIOS .


Windows, Linux , :


图片


6. SPI


, , , SPI-- ( , ), / .


UEFI , . , , ! Linux , . , , , .


7. Thunderbolt Boot Camp


, Apple Thunderbolt I/O MMU. , MacBook I/O MMU, . Apple :


Some of the hardware security features you outlined are only available when users run macOS. If users are concerned about any of the issues in your paper, we recommend that they use macOS.

Thunderbolt, C Windows Apple. MacBook I/O MMU BIOS , DMA Windows .


Windows DMA .


Thunderspy:


, Thunderbolt - , PCI-Express-.


, , , «» PCI-Express PCI Leech.


: Bitlocker TrueCrypt .


Thunderbolt 4/USB4


, , .
Intel Ice Lake Thunderbolt 3 ( BIOS , Intel ME). I/O MMU DMA- Thunderbolt.


USB4 – PCI Express, . I/O MMU, USB4. Microsoft Windows DMA- Thunderspy.



. , . (DMA ), (I/O MMU).


« Thunderbolt»? , . Thunderspy , DisplayPort & USB Only No Security Thunderbolt . ( ) Thunderbolt.
USB4 – , !



Raccoon Security – «» , , , .


All Articles