So now you can't even put glue in the thunderbolt port anymore to prevent DMA attacks?
I don't think DMA attacks have been fully solved yet via software, or am I not up to date here? I guess you could blacklist the driver.
I don't think DMA attacks have been fully solved yet via software, or am I not up to date here? I guess you could blacklist the driver.
And yeah, we really need device firewalls that isolate everything via IOMMU and don't allow drivers to do any memory mappings until the user confirmed the device.
Do you also think people who use screenlocks are tinfoil hatters?
I'm not willing to throw away my device's resale value to block a physical compromise attack.
It's not always practical to take your notebook to the toilet with you, so you want to make it as hard as possible for someone to compromise it in a limited time frame. Security is never absolute, it just about buying time to notice an attack. This applies to the physical lock on your door just as much as it does on your notebook