Post #4038130
2026-07-23 14:07 UTC
@seuros@mastodon.bsd.cafe Right, but in those other cases, the device in question was a fixed installation inside the computer's enclosure that you had chosen to trust, not an external device. I've always deemed bus-mastering DMA a design flaw in all of those other things too, though IOMMU mostly fixed it on hardware new enough to have an IOMMU that's an actual security boundary and not just advisory like some early ones were.
None of this detracts from what you're doing, and I'm glad you'll be wiring up the IOMMU stuff.
Replies (1)
-
@khm@hj.9fs.net 2026-07-23 14:20
thunderbolt devices are not usually fixed installations inside the enclosures, same for e.g. eGPUs. the security boundary these days is very much 'late firewire' in style. except we don't get plug-in debuggers with thunderbolt! underrated firewire utility right there CC: @seuros@bsd.cafe @dalias@hachyderm.io