{"id":47506,"date":"2019-02-27T18:51:10","date_gmt":"2019-02-28T00:51:10","guid":{"rendered":"https:\/\/eshop.macsales.com\/blog\/?p=47506"},"modified":"2019-03-01T11:08:58","modified_gmt":"2019-03-01T17:08:58","slug":"thunderclap-vulnerabilities-can-attack-a-macs-memory","status":"publish","type":"post","link":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/","title":{"rendered":"‘Thunderclap’ Vulnerabilities Can Attack a Mac’s Memory"},"content":{"rendered":"
\"\"As has been widely reported, vulnerabilities in the Thunderbolt<\/a> interface have been disclosed by security researchers. <\/div>\n
 <\/div>\n
\u201cThunderclap”, as it is known, is a set of vulnerabilities that take advantage of issues with the way Thunderbolt operates and allows a device connecting via the interface to acquire sensitive data from the host Mac, an issue that affects almost all Macs released since 2011, notes AppleInsider<\/i><\/a>.<\/div>\n
 <\/div>\n
Thunderclap vulnerabilities let malicious peripherals attack a Mac’s memory<\/a>. It also affects some Windows, Linux, and FreeBSD systems. Thunderclap affects the way Thunderbolt-based peripherals are allowed to connect and interact with these operating systems, allowing a malicious device to steal data directly from the operating system’s memory.<\/div>\n
 <\/div>\n
According to ZDNet<\/i>,<\/a> researchers from the University of Cambridge, Rice University, and SRI International discovered the Thunderclap issues back in 2016, and they’ve been working quietly with hardware and operating system versions for three years in complete silence to have them fixed.<\/div>\n
 <\/div>\n
Thunderbolt 3 is often supported via USB Type-C<\/a> ports on modern laptops. Machines with older versions of Thunderbolt (carried over a Mini DisplayPort connector) are also affected. Thunderclap vulnerabilities can also be exploited by compromised PCI Express peripherals, either plug-in cards or chips soldered to the motherboard.<\/div>\n
 <\/div>\n
The research team behind the vulnerability says that “all Apple laptops and desktops produced since 2011 are vulnerable, with the exception of the 12-inch MacBook<\/a>.\u201d They add that “many laptops, and some desktops, designed to run Windows or Linux produced since 2016 are also affected,” if they support the Thunderbolt interface.<\/div>\n
 <\/div>\n
It should be noted that Thunderclap requires physical access to the computer. The end of the AppleInsider<\/i> article states the best advice of not plugging in random and untrusted Thunderbolt devices of any sort into your Mac. You can also protect yourself by not leaving your computer unattended in public and by not using public USB-C charging stations.<\/div>\n
 <\/div>\n
Technical details about the Thunderclap flaws are available in a research paper titled “Thunderclap: Exploring Vulnerabilities in Operating System IOMMU Protection via DMA from Untrustworthy Peripherals,” available for download in PDF form at thunderclap.io\/thunderclap-paper-ndss2019.pdf<\/wbr><\/a>.<\/div>\n
 <\/div>\n
Be sure to check back with the Rocket Yard for more developments on this story. <\/div>\n","protected":false},"excerpt":{"rendered":"

As has been widely reported, vulnerabilities in the Thunderbolt interface have been disclosed by security researchers.    \u201cThunderclap”, as it is known, is a set of vulnerabilities that take advantage of issues with the way Thunderbolt operates and allows a device connecting via the interface to acquire sensitive data from the host Mac, an issue that affects […]<\/p>\n","protected":false},"author":108,"featured_media":45276,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"spay_email":"","footnotes":""},"categories":[2646],"class_list":["post-47506","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-news"],"yoast_head":"\n'Thunderclap' Vulnerabilities Can Attack a Mac's Memory<\/title>\n<meta name=\"description\" content=\"As has been widely reported, vulnerabilities in the Thunderbolt interface have been disclosed by security researchers.   \" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"'Thunderclap' Vulnerabilities Can Attack a Mac's Memory\" \/>\n<meta property=\"og:description\" content=\"As has been widely reported, vulnerabilities in the Thunderbolt interface have been disclosed by security researchers.   \" \/>\n<meta property=\"og:url\" content=\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/\" \/>\n<meta property=\"og:site_name\" content=\"Rocket Yard\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/AWToday\" \/>\n<meta property=\"article:published_time\" content=\"2019-02-28T00:51:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-03-01T17:08:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/07\/Thunderbolt_boltlogo.svg_-284x308.png\" \/>\n\t<meta property=\"og:image:width\" content=\"284\" \/>\n\t<meta property=\"og:image:height\" content=\"308\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Dennis Sellers\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/www.facebook.com\/AWToday\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Dennis Sellers\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/\"},\"author\":{\"name\":\"Dennis Sellers\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/1583ce4e38fc736c85cdd5758da43c91\"},\"headline\":\"‘Thunderclap’ Vulnerabilities Can Attack a Mac’s Memory\",\"datePublished\":\"2019-02-28T00:51:10+00:00\",\"dateModified\":\"2019-03-01T17:08:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/\"},\"wordCount\":384,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\"},\"keywords\":[\"Thunderbolt\",\"Thunderclap\",\"vulnerability\"],\"articleSection\":[\"Industry News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/\",\"name\":\"'Thunderclap' Vulnerabilities Can Attack a Mac's Memory\",\"isPartOf\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#website\"},\"datePublished\":\"2019-02-28T00:51:10+00:00\",\"dateModified\":\"2019-03-01T17:08:58+00:00\",\"description\":\"As has been widely reported, vulnerabilities in the Thunderbolt interface have been disclosed by security researchers.   \",\"breadcrumb\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/eshop.macsales.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"‘Thunderclap’ Vulnerabilities Can Attack a Mac’s Memory\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#website\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/\",\"name\":\"Rocket Yard\",\"description\":\"Your source for expert tips, special deals, commentary, reviews, and the latest tech news.\",\"publisher\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/eshop.macsales.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\",\"name\":\"OWC\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png\",\"contentUrl\":\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png\",\"width\":1024,\"height\":1024,\"caption\":\"OWC\"},\"image\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/1583ce4e38fc736c85cdd5758da43c91\",\"name\":\"Dennis Sellers\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e3d1a76050c9ba2bf8fa17ae880a72e56f662e46e7486428d750789a4d6ab1d6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e3d1a76050c9ba2bf8fa17ae880a72e56f662e46e7486428d750789a4d6ab1d6?s=96&d=mm&r=g\",\"caption\":\"Dennis Sellers\"},\"description\":\"Dennis has over 40 years of journalism experience and has written hundreds of articles. For the past 20-plus years, he's been an online journalist, covering mainly Apple Inc. He's written for MacCentral, MacWorld, MacMinute, Macsimum News, Apple Daily Report, and is now contributing editor at Apple World Today.\",\"sameAs\":[\"http:\/\/www.appleworld.today\",\"https:\/\/www.facebook.com\/AWToday\",\"https:\/\/www.instagram.com\/appleworldtoday\/\",\"https:\/\/www.linkedin.com\/company\/apple-world-today\/\",\"https:\/\/www.pinterest.com\/appleworldtoday\/\",\"https:\/\/twitter.com\/https:\/\/www.facebook.com\/AWToday\",\"https:\/\/www.youtube.com\/channel\/UCUnDTuaRnXncKQXfQYVNIJA\"],\"url\":\"https:\/\/eshop.macsales.com\/blog\/author\/dennis-sellers\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"'Thunderclap' Vulnerabilities Can Attack a Mac's Memory","description":"As has been widely reported, vulnerabilities in the Thunderbolt interface have been disclosed by security researchers.   ","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/","og_locale":"en_US","og_type":"article","og_title":"'Thunderclap' Vulnerabilities Can Attack a Mac's Memory","og_description":"As has been widely reported, vulnerabilities in the Thunderbolt interface have been disclosed by security researchers.   ","og_url":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/","og_site_name":"Rocket Yard","article_author":"https:\/\/www.facebook.com\/AWToday","article_published_time":"2019-02-28T00:51:10+00:00","article_modified_time":"2019-03-01T17:08:58+00:00","og_image":[{"width":284,"height":308,"url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/07\/Thunderbolt_boltlogo.svg_-284x308.png","type":"image\/png"}],"author":"Dennis Sellers","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/www.facebook.com\/AWToday","twitter_misc":{"Written by":"Dennis Sellers","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/#article","isPartOf":{"@id":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/"},"author":{"name":"Dennis Sellers","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/1583ce4e38fc736c85cdd5758da43c91"},"headline":"‘Thunderclap’ Vulnerabilities Can Attack a Mac’s Memory","datePublished":"2019-02-28T00:51:10+00:00","dateModified":"2019-03-01T17:08:58+00:00","mainEntityOfPage":{"@id":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/"},"wordCount":384,"commentCount":1,"publisher":{"@id":"https:\/\/eshop.macsales.com\/blog\/#organization"},"keywords":["Thunderbolt","Thunderclap","vulnerability"],"articleSection":["Industry News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/","url":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/","name":"'Thunderclap' Vulnerabilities Can Attack a Mac's Memory","isPartOf":{"@id":"https:\/\/eshop.macsales.com\/blog\/#website"},"datePublished":"2019-02-28T00:51:10+00:00","dateModified":"2019-03-01T17:08:58+00:00","description":"As has been widely reported, vulnerabilities in the Thunderbolt interface have been disclosed by security researchers.   ","breadcrumb":{"@id":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/eshop.macsales.com\/blog\/47506-thunderclap-vulnerabilities-can-attack-a-macs-memory\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/eshop.macsales.com\/blog\/"},{"@type":"ListItem","position":2,"name":"‘Thunderclap’ Vulnerabilities Can Attack a Mac’s Memory"}]},{"@type":"WebSite","@id":"https:\/\/eshop.macsales.com\/blog\/#website","url":"https:\/\/eshop.macsales.com\/blog\/","name":"Rocket Yard","description":"Your source for expert tips, special deals, commentary, reviews, and the latest tech news.","publisher":{"@id":"https:\/\/eshop.macsales.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/eshop.macsales.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/eshop.macsales.com\/blog\/#organization","name":"OWC","url":"https:\/\/eshop.macsales.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png","contentUrl":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png","width":1024,"height":1024,"caption":"OWC"},"image":{"@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/1583ce4e38fc736c85cdd5758da43c91","name":"Dennis Sellers","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e3d1a76050c9ba2bf8fa17ae880a72e56f662e46e7486428d750789a4d6ab1d6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e3d1a76050c9ba2bf8fa17ae880a72e56f662e46e7486428d750789a4d6ab1d6?s=96&d=mm&r=g","caption":"Dennis Sellers"},"description":"Dennis has over 40 years of journalism experience and has written hundreds of articles. For the past 20-plus years, he's been an online journalist, covering mainly Apple Inc. He's written for MacCentral, MacWorld, MacMinute, Macsimum News, Apple Daily Report, and is now contributing editor at Apple World Today.","sameAs":["http:\/\/www.appleworld.today","https:\/\/www.facebook.com\/AWToday","https:\/\/www.instagram.com\/appleworldtoday\/","https:\/\/www.linkedin.com\/company\/apple-world-today\/","https:\/\/www.pinterest.com\/appleworldtoday\/","https:\/\/twitter.com\/https:\/\/www.facebook.com\/AWToday","https:\/\/www.youtube.com\/channel\/UCUnDTuaRnXncKQXfQYVNIJA"],"url":"https:\/\/eshop.macsales.com\/blog\/author\/dennis-sellers\/"}]}},"jetpack_featured_media_url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2018\/07\/Thunderbolt_boltlogo.svg_-284x308.png","jetpack_shortlink":"https:\/\/wp.me\/pmPaT-cme","_links":{"self":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/47506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/users\/108"}],"replies":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/comments?post=47506"}],"version-history":[{"count":1,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/47506\/revisions"}],"predecessor-version":[{"id":47507,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/47506\/revisions\/47507"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/media\/45276"}],"wp:attachment":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/media?parent=47506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/categories?post=47506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}