People keep talking about Thunderbolt DMA attacks as though they're a foregone conclusion. Prior to doing this research, we hadn't seen one that didn't involve using a Thunderbolt to FireWire adapter. This kind of attack, when performed against current hardware, is subject to the same limitations and mitigations as the FireWire DMA attacks we've seen since Kiwicon's very own Metlstorm winlockpwned his way to fame in 2006.
In this talk, snare will discuss the approach that he and rzn took when attacking systems with a Thunderbolt port. Will our heroes triumph over evil, or will they get hit by a bus?