Red Hat's Latest Project: "Bolt" To Deal With Linux Thunderbolt Security

[starshipeleven]

I hope so, lest TB security is undermined by attackers inserting rogue TB hubs/docks/active cables.

Afaik TB hubs are not passive/trasparent devices, they have their own entry in lshw and are recognized by the system, just like the more common USB hubs.

If they were passive/trasparent (like say ethernet switches), then it would be an issue.

Thunderbolt peripherals are still several times as expensive as USB 3 hardware, with only limited benefits.

Thunderbolt makes sense for dock-like devices you then use as hubs to attach other stuff over pcie/USB3/screen ports.

Plus Thunderbolt mandates wiring up DisplayPort and Power to the port, which is an additional cost factor. So I don't see this technology taking off just yet.

That is an issue because the controller is an external chip. Once Intel starts integrating the controller in the CPU then it will take off as not as much additional effort will be required.
Afaik they said they will do so next year, and make the TB spec royalty-free https://newsroom.intel.com/editorial...-3-everywhere/