12.5 C
New York
Wednesday, September 30, 2020
Home News Microsoft says Thunderbolt 3 is not safe for Surface products

Microsoft says Thunderbolt 3 is not safe for Surface products

A new leak has provided some insight into why Microsoft’s Surface lineup doesn’t feature Thunderbolt 3 ports. The reasoning comes down to security concerns, according to an internal Surface engineering webinar posted by Walking Cat on Twitter.

Surfaces don't have Thunderbolt because its insecure ???? pic.twitter.com/lb7YYOOQ4Y

— WalkingCat (@h0x0d) April 25, 2020

Per the employee speaking in the video, Microsoft’s Surface lineup doesn’t feature Intel’s Thunderbolt technology because “that’s indirect memory access.” The vulnerability to a direct memory access attack has always been present with Thunderbolt technology, but Microsoft remains the only manufacturer refusing to use it.

The employee also explains how someone with bad intentions and extensive hacking knowledge and the right tools can use the technology and port to access data stored on a device.

“If you have a well-prepared stick, you can put into the direct memory access port, then you can access the full device in memory and all data that are stored in memory. We don’t believe at this moment that Thunderbolt can deliver the security that is really needed from the devices,” says the employee.

The authenticity of the video is questionable, but The Verge reports that it was able to verify that is genuine. The Microsoft employee speaking in the video is apparently based in the Netherlands and has worked with the company for 10 years. Microsoft has not commented on the video yet.

Microsoft’s Surface devices are one of the only premium laptops and 2-in-1s to not include Thunderbolt 3. Other manufacturers like HP, Dell, Apple, and Lenovo have opted to include the port, which allows for fast data transfer rates, charging of smartphones, and support for external GPUs.

Despite the benefits, there are indeed risks. In 2019, security researchers disclosed a vulnerability similar to the one that Microsoft discussed in the leaked video. Microsoft, though, has a new feature called Kernel DMA Protection, built into the system and Windows 10 which can prevent this at certain levels. Apple also has a T2 security chip in its MacBooks and Mac devices which secures Touch ID Data, and storage and enables secure boot.

Other than Thunderbolt 3, the leaked video also discusses why Microsoft doesn’t allow users to upgrade the RAM in Surface devices. This is also apparently a security threat, according to Microsoft.

The video explains that with the right tools, someone with bad intentions can access data and contents of a device by “freezing the memory with liquid nitrogen, get the memory out, and then put it in a specific reader to access all data stored in the memory.” Of course, this is not easily done, but it does explain why users can’t upgrade their Surface devices.

Latest

Here’s your chance to save more than 60% on a SurfShark VPN subscription

Gone are the days where the only people who cared about a proxy internet connection were the nefarious hackers and ne’er-do-well types at your local library and coffee shop. In our modern world of rapidly vanishing privacy, it’s increasingly important to protect yourself your data.We’ve all seen more and more reports of compromised security, leaks, and hacks. It’s damn near impossible to go online and remain untouched or subject to problems. Sadly, there’s nothing that we see happening to make us expect things to get safer in the immediate future. How does one safeguard their internet activity? With a VPN service, like SurfShark, that’s how.PROMOTED: Do you really need a VPN for your mobile phone?Whether you want to enjoy content in markets outside of your own, torrent files, or simply safeguard yourself, SurfShark can help. There’s a lot of junk out there; put a safety net between you and the garbage.FeaturesBrowse securely, even on public WiFi, w/ AES-256-GCM encryptionSurf restriction-free w/ unlimited data & bandwidth on unlimited devicesCleanWeb feature blocks ads, trackers & malware while you browseAccess 1200+ servers in 61 countries worldwideProtect your true IP from websites w/ WebRTC protectionMitigate risks w/ IPv6 leak protection, kill switch & Zero-knowledge DNSEnjoy content faster w/ optimized online content viewing & torrent-friendly serversEvade geo-restrictions & access your favorite sites anywhereBrowse w/ peace of mind thanks to a strict no-logging policySurfShark provides the ability to anonymously connect to the internet with private encryption. That means your data won’t be out in the open on those sketchy public Wi-Fi and mobile networks. Also, no activity-logs… not that you’d have any reason for that to be an issue.A Work-from-Home MustA VPN is a must-have in the COVID-19 era and world of working or attending school from a latop in the kitchen. SufrShark is a great service to protect yourself and your valuable information. And, really, it’s peace of mind at its core. One year of SurfShark typically retails for $145 but AndroidGuys readers get a subscription much cheaper.Sign up for a four-year plan and get it for just $99.99, or 82% off. Also available are two-year and three-year options.

Microsoft looks to dominate cloud-gaming with Xbox Game Pass Ultimate

Remember some years ago when Microsoft got completely taken apart for wanting to release an Xbox that had to have constant internet access and wouldn’t have a disc tray? Fast forward to 2020, the year of the alien invasion. Ok maybe that hasn’t happened, but at this point would it really surprise anyone? While both Microsoft and Sony have announced a disk tray-less version of their next gen consoles, Microsoft has just taken a very commanding lead with the launch of Cloud Gaming on Xbox Game Pass Ultimate. It has over 150 titles available on the cloud. If you’re already a member, you don’t have to pay extra for cloud gaming, you just get it.How does it work?To put it very basically, all your games are saved on the internet. What that means is while you technically won’t “own” the game you will have access to it anywhere you go with a decent internet connection. No, you don’t have to take your console or even your laptop with you. As long as you have an Android phone/tablet you’re in the game. Could you imagine playing on your brand new Galaxy Fold 2?What’s even better is, say you start a Gears 5 on your Xbox console at home, but have to go to Grandma’s (or in-laws). Grab your phone or tablet before you leave and you’ll be able to pick up right where you left off. Isn’t technology great?PricingThis is all fantastic but it doesn’t really matter too much if it costs $100 every month. While that may be worth it for some, thankfully Microsoft didn’t go that route. If you’re a new member you can get your first month for only $1! That’s right, you could get your first month for the loose change you find in Grandma’s couch. Unless it’s covered in plastic. If you’ve already been a member you’ll still only have to shell out $15 per month to get your game on.What about the games?None of this really matters if the games are horrible. While you might have to weed your way through a handful of games you don’t care about, you can find some real good titles in the mix. This list isn’t exhaustive, but the ones that stand out to me.ARK: Survival EvolvedBatman: Arkham KnightBattletoadsCrackdown 3: CampaignDarksiders IIIDead by DaylightForza Horizon 4Gears of War 1, 4, and 5Guacamelee! 2Mortal Kombat X (not available in Korea)Streets of Rage 4There are a ton more, you can find the full list here. One last thing, you don’t even need to own an Xbox console to take advantage of Game Pass Ultimate. As long as you have a compatible controller paired with an Android phone/tablet or a PC. This has got to be one of the best values in gaming at the moment.Will you be getting Xbox Game Pass Ultimate? If so, what game(s) are you looking forward to playing? Sound off in the comments!

Xiaomi MIUI 12 (Android 11) hands-on: Not ready for prime-time just yet

MIUI 12 gets a fresh set of features thanks to Android 11, but the beta build is not ready for

Samsung Galaxy S20 review: A near-perfect, pocket-friendly powerhouse

The smaller, the better.While many folks looking for a new phone will immediately race to the biggest and fanciest new