Intel's Thunderbolt Share is a speedy sneakernet replacement and more

Re:Intel's Thunderbolt Share is a speedy sneakernet replacem... by baq on Tuesday August 20, 2024 @03:33AM (#41297706)

OTOH corporate security gets paged whenever you plug something that isn’t a power supply or a monitor into the corporate box, up to and including an Ethernet cable.

[ Parent | on HN ]

Re:Intel's Thunderbolt Share is a speedy sneakernet replacem... by elric on Tuesday August 20, 2024 @04:08AM (#41297901)

I've seen banks disable USB ports by means of hot glue.

Hardware attacks are super hard to defend against. Depending on your threat model, drastic measures might be warranted. Anything with a USB plug can be a keyboard with an attack payload (e.g. Rubber Ducky). And if you think you can whitelist devices based on USB class or some identifier, you're wrong as they can be spoofed. Heck, there are "USB C cables" that are really attack payload delivery systems (e.g. O.MG Cable).

It's a scary world out there. Stay safe.

[ Parent | on HN ]

Re:Intel's Thunderbolt Share is a speedy sneakernet replacem... by transpute on Tuesday August 20, 2024 @05:03AM (#41298212)

Banks could ask known-good keyboard vendors to implement PKI auth. Intel has a spec for PCIe device authentication, based on USB-C authentication, https://www.intel.com/content/dam/www/public/us/en/documents...

[ Parent | on HN ]

Re:Intel's Thunderbolt Share is a speedy sneakernet replacem... by elric on Wednesday August 21, 2024 @02:26AM (#41307363)

I hadn't heard of either PCIe auth or USB-C auth. Thanks for sending me down that rabbit hole!

[ Parent | on HN ]

Re:Intel's Thunderbolt Share is a speedy sneakernet replacem... by tiberious726 on Wednesday August 21, 2024 @02:29PM (#41312846)

Like this: https://www.cherryamericas.com/secure-board-1-0

[ Parent | on HN ]

Re:Intel's Thunderbolt Share is a speedy sneakernet replacem... by transpute on Wednesday August 21, 2024 @06:06PM (#41314661)

Fantastic, thanks for the pointer!

[ Parent | on HN ]