"Thunderstrike" is the name for an attack that can target Mac hardware via the Thunderbolt port. Apple had previously updated the Retina 5K iMac and 2014 Mac mini to partially secure them against Thunderstrike. Now, the upcoming OS X Yosemite 10.10.2 will fix the problem for all recent Macs running Yosemite.
Rick Mogull previously explained how Thunderstrike works on TidBITS:
Macs, like all computers, have firmware that swings into action when you push the power button, booting up the computer, loading the operating system, initializing hardware, and performing other functions. Some technologies, such as FireWire and Thunderbolt, interact with this firmware at an extremely low level, below Mac OS X itself, for feature and performance reasons.
The Thunderstrike proof-of-concept takes advantage of this trust to replace the contents of the Mac's boot ROM with the attacker's own code, effectively embedding it into the Mac's hardware and making it impossible to remove using standard techniques. The attack works because Apple relies on software checks to confirm the firmware is valid, and Hudson developed techniques to circumvent those checks (and even replace the encryption key).
To secure against Thunderstrike, Apple had to change the code to not only prevent the Mac's boot ROM from being replaced, but also to prevent it from being rolled back to a state where the attack would be possible again. According to people with access to the latest beta of OS X 10.10.2 who are familiar with Thunderstrike and how it works, that's exactly the deep, layered process that's been completed.
OS X 10.10.2, which was last seeded to developers earlier this week and will be made available to everyone as soon as it goes into wide release. OS X 10.10.2 also fixes three recently disclosed Project Zero vulnerabilities.
In the meantime, no instances of Thunderstrike have been found in wild, and the attack requires either physical access to the targeted computer, or social engineering sufficient to trick the owner into "attacking" themselves.
So, as with other recent Apple-related security stories, be informed but don't be alarmed. It's known, it's not likely to affect anyone reading this, and the fix is on its way.
We may earn a commission for purchases using our links. Learn more.
Apple adds iPod shuffle (4th gen) and iPod nano (7th gen) to vintage list
Apple has added a couple of iPods to the vintage list and one to the obsolete list.
'South of the Circle,' a narrative adventure, coming soon to Apple Arcade
The game, a "narrative adventure game about memory, survival, and the consequences of not dealing with the past," launches soon.
Apple Card users can see their annual spending with iOS 14.2 beta 2
Apple Card users with iOS 14.2 beta 2 installed have noticed that they can now see their annual spending for the first time.
Make sure you have all the ports you need for your Mac with a USB-C hub
The MacBook Pro (Late 2016 and newer) sports at least two, and up to four Thunderbolt 3 ports, but that's all. What to do if you need other ports? Get a hub!