Are Thunderbolt-enabled computers without Thunderbolt ports vulnerable to Thunderspy?

Could these two attack scenarios exploit the recently publicized vulnerability?

  • Using a Thunderbolt adapter like an USB-to-Thunderbolt adapter on a computer without any Thunderbolt port
  • Temporarily replacing hardware (mainboard) with hardware that has Intel’s Thunderbolt port

And if one or both would work: what would be a reliable way to protect against this on such computers (Thunderbolt-enabled or Thunderbolt not disabled and hardware-replaceable)?

If a Tempest cleric uses the Wrath of the Storm and Thunderbolt Strike features to push an attacker away, can the attacker complete its multiattack?

The Tempest Domain cleric’s Thunderbolt Strike feature (PHB, p. 62) says:

At 6th level, when you deal lightning damage to a Large or smaller creature, you can also push it up to 10 feet away from you.

I envision the Thunderbolt Strike as throwing the target creature away from it, not gently pushing it away. I mean, lightning is an instantaneous thing, and 10 feet is more than just losing your balance.

The Thunderbolt Strike feature of a Tempest cleric leaves me with many questions. For instance, if a monster is able to make a multiattack consisting of 2 claw attacks and then a bite, and it hits me with its first attack, I can use Wrath of Storm as a reaction to deal lightning damage to it, and thereby blast the creature back 10 feet using Thunderbolt Strike.

If the monster does not have 10 feet of movement left after being pushed, does it lose its other 2 attacks against me (if no other targets are in range of it)? Or does it get to make all 3 attacks before it is blasted away from me?

Thunderbolt dock screens not working after waking from sleep

I have a HP ZBook 15 G4 with both Intel 630 and Nvidia Quadro M1200 Mobile GPU with Nvidida driver 430 running 18.04.3. At work I have a Thunderbolt dock (https://store.hp.com/in-en/default/hp-zbook-200w-thunderbolt-3-dock-p5q61aa.html) that I connect to access my two external displays and mouse & keyboard. This works fine if I do a cold boot of the machine but if I would put Ubuntu to sleep, disconnect the thunderbolt cable and wake the machine the next day and connect, only the keyboard and mouse works, not the screens. The get them back working, I have to reboot my machine and thus closing all my open programs and files.

I have tried various graphics drivers but not been able to get this working. My dock is running the latest firmware as well as the bios of my machine.

How can I solve this issue? Could I somehow do a “soft” reboot of the driver or something else when waking it up?

Thunderbolt 1 port doesn’t recognize Thunderbolt 2 drive on boot

I am looking to find a way to execute the logic the thunderbolt system executes when it detects a newly hot-plugged hard drive (block device). I can get my drive recognized, and it works fine, just not on boot.

Hardware: Mac Mini Server 2011 – with one Thunderbolt 1 port connected to a Promise Pegasus2 R8 Thunderbolt 2 Raid Enclosure (presents as 1 block device)

Software: Ubuntu Server 18.04.3 LTS

Once the server is booted, if I unplug the drive for 10 seconds, and then plug it back into the Mac Mini, the drive will go through a 5-10 second startup sequence finishing with it’s LED going blue and 2 seconds later a few final beeps. At that point, if I do an lsblk, I see the block device, and can partition it, make a filesystem, mount it etc.

After a reboot, the system does not see the block device, and I have to unplug+replug to get it recognized.

I don’t know if what I am asking is possible. It’s possible that logic can only be triggered by a hot-plug event due to the nature of Thunderbolt 1. I have a Mac Mini 2014 with Thunderbolt 2 ports with a similar drive running the same OS, and it sees it’s drive on boot.

Or there might not be a control interface/tool to the driver subsystem. The bolt package has a boltctl tool which issues commands to a boltd, but they seem to relate to security, and when I install the bolt package, I can see the drive using boltctl, but there is no block device mapped to it unless I unplug+replug. I also don’t need the bolt package installed to get my block device.

Hoping someone can shed some light on triggering that logic via software for me.

Trying to troubleshoot Elgato Thunderbolt 2 dock on iMac 12,2 (Ubuntu 19.04)

I got a thunderbolt 2 dock from eBay. I got it to work under MacOS once (wasn’t trying very hard, because I had already switched over to linux by the time I bought it). It only seemed to work under the MacOS rescue mode, but again, I wasn’t trying to troubleshoot it under MacOS.

When I plug it in, I get no displayport passthrough, no USB. lspci does see the components of the dock, though. Here’s what I tried:

LSPCI–

Before:

00:00.0 Host bridge: Intel Corporation 2nd Generation Core Processor Family DRAM Controller (rev 09) 00:01.0 PCI bridge: Intel Corporation Xeon E3-1200/2nd Generation Core Processor Family PCI Express Root Port (rev 09) 00:02.0 Display controller: Intel Corporation 2nd Generation Core Processor Family Integrated Graphics Controller (rev 09) 00:16.0 Communication controller: Intel Corporation 6 Series/C200 Series Chipset Family MEI Controller #1 (rev 04) 00:1a.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Universal Host Controller #5 (rev 05) 00:1a.7 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #2 (rev 05) 00:1b.0 Audio device: Intel Corporation 6 Series/C200 Series Chipset Family High Definition Audio Controller (rev 05) 00:1c.0 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 1 (rev b5) 00:1c.1 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 2 (rev b5) 00:1c.2 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 3 (rev b5) 00:1c.4 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 5 (rev b5) 00:1d.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Universal Host Controller #1 (rev 05) 00:1d.7 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #1 (rev 05) 00:1f.0 ISA bridge: Intel Corporation Z68 Express Chipset LPC Controller (rev 05) 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset Family 6 port Desktop SATA AHCI Controller (rev 05) 00:1f.3 SMBus: Intel Corporation 6 Series/C200 Series Chipset Family SMBus Controller (rev 05) 01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Whistler [Radeon HD 6630M/6650M/6750M/7670M/7690M] 01:00.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Turks HDMI Audio [Radeon HD 6500/6600 / 6700M Series] 02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM57765 Gigabit Ethernet PCIe (rev 10) 03:00.0 Network controller: Qualcomm Atheros AR93xx Wireless Network Adapter (rev 01) 04:00.0 FireWire (IEEE 1394): LSI Corporation FW643 [TrueFire] PCIe 1394b Controller (rev 08) 05:00.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:00.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:03.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:04.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:05.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:06.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 07:00.0 System peripheral: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 

After plugging in:

00:00.0 Host bridge: Intel Corporation 2nd Generation Core Processor Family DRAM Controller (rev 09) 00:01.0 PCI bridge: Intel Corporation Xeon E3-1200/2nd Generation Core Processor Family PCI Express Root Port (rev 09) 00:02.0 Display controller: Intel Corporation 2nd Generation Core Processor Family Integrated Graphics Controller (rev 09) 00:16.0 Communication controller: Intel Corporation 6 Series/C200 Series Chipset Family MEI Controller #1 (rev 04) 00:1a.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Universal Host Controller #5 (rev 05) 00:1a.7 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #2 (rev 05) 00:1b.0 Audio device: Intel Corporation 6 Series/C200 Series Chipset Family High Definition Audio Controller (rev 05) 00:1c.0 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 1 (rev b5) 00:1c.1 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 2 (rev b5) 00:1c.2 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 3 (rev b5) 00:1c.4 PCI bridge: Intel Corporation 6 Series/C200 Series Chipset Family PCI Express Root Port 5 (rev b5) 00:1d.0 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Universal Host Controller #1 (rev 05) 00:1d.7 USB controller: Intel Corporation 6 Series/C200 Series Chipset Family USB Enhanced Host Controller #1 (rev 05) 00:1f.0 ISA bridge: Intel Corporation Z68 Express Chipset LPC Controller (rev 05) 00:1f.2 SATA controller: Intel Corporation 6 Series/C200 Series Chipset Family 6 port Desktop SATA AHCI Controller (rev 05) 00:1f.3 SMBus: Intel Corporation 6 Series/C200 Series Chipset Family SMBus Controller (rev 05) 01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Whistler [Radeon HD 6630M/6650M/6750M/7670M/7690M] 01:00.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] Turks HDMI Audio [Radeon HD 6500/6600 / 6700M Series] 02:00.0 Ethernet controller: Broadcom Inc. and subsidiaries NetXtreme BCM57765 Gigabit Ethernet PCIe (rev 10) 03:00.0 Network controller: Qualcomm Atheros AR93xx Wireless Network Adapter (rev 01) 04:00.0 FireWire (IEEE 1394): LSI Corporation FW643 [TrueFire] PCIe 1394b Controller (rev 08) 05:00.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:00.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:03.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:04.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:05.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 06:06.0 PCI bridge: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 07:00.0 System peripheral: Intel Corporation CV82524 Thunderbolt Controller [Light Ridge 4C 2010] 09:00.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0a:00.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0a:01.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0a:04.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0a:05.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0b:00.0 USB controller: Fresco Logic FL1100 USB 3.0 Host Controller (rev 10) 0c:00.0 Ethernet controller: Intel Corporation I210 Gigabit Network Connection (rev 03) 

after “echo 1 |sudo tee /sys/bus/pci/rescan”:

(no difference)

NEW:

09:00.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0a:00.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0a:01.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0a:04.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0a:05.0 PCI bridge: Intel Corporation DSL5520 Thunderbolt 2 Bridge [Falcon Ridge 4C 2013] 0b:00.0 USB controller: Fresco Logic FL1100 USB 3.0 Host Controller (rev 10) 0c:00.0 Ethernet controller: Intel Corporation I210 Gigabit Network Connection (rev 03) 

Nothing new when I plug in the displayport to hdmi cable

Output of “tbtadm devices”

0-1 Elgato Systems  Thunderbolt 2 Dock  authorized  not in ACL 

Output of “tbtadm approve-all” (Pretty much grasping at straws at this point)

Found domain "/sys/bus/thunderbolt/devices/domain0" Approval not relevant in SL0 

Output of “tbtadm topology”

Controller 0     ├─ Details:     │   ├─ Name: Unknown device, Unknown vendor     │   └─ Security level: SL0 (none)     │     └─ Thunderbolt 2 Dock, Elgato Systems         └─ Details:             ├─ Route-string: 0-1             ├─ Authorized: Yes             ├─ In ACL: No             └─ UUID: 00000000-0000-0008-8015-5f0bc663b851 

“tbtadm peers” returns no output, return code 0 (not surprising)

Output of “tbtadm add 0-1”

Adding to ACL is not relevant in SL0 

Output of “sudo dmidecode”: https://privatebin.net/?35c094141f2e0ead#D9CBXBghp2HQjh4vx8Cb8XSymmUf6hXyYz84zxy5YEDF

Output of “neofetch”: https://privatebin.net/?c221a62bf97c532c#FL33NJSeCqXf7k8mo4ETgGrghiAiyXPgZ2utfTm5dadf

Any ideas?

Getting sound to an external monitor (TV hooked up with HDMI to thunderbolt) from iMac but NOT simulatneously

I connected my tv to the iMac last night. when I drag a program up to the tv the sound switches from my computer speakers to my tv speakers; I thought this was a great feature, However when I woke up the speakers are only working on the computer. I know how to switch it to the tv, I know how to play them at the same time, I just can’t get back to that smart audio that I appreciated so much. I have scoured the web looking for answers and even called apple support. can anyone here help?

Tool to objectively test performance various external drives on my Mac via USB & Thunderbolt

I would to test the relative performance of various external storage devices:

  • Thumb drive
    • Samsung MUF-256AB/AM FIT Plus 256GB – 300MB/s USB 3.1 Flash Drive (256 gigs)
  • Spinning metal drive
    • Toshiba Canvio Advance 1TB Portable External Hard Drive USB 3.0, Blue (HDTC910XL3AA)
  • NVMe M.2 solid-state storage adapter
    • EXMTE M.2 NVME USB 3.1 Adapter M-Key M.2 NGFF NVME to USB Card High Performance 10 Gbps USB 3.1 Gen 2 Bridge Chip
    • Samsung 970 EVO Plus Series – 250GB PCIe NVMe – M.2 Internal SSD (MZ-V7S250B/AM)

I do not care about free-of-cost or not, I’d be okay with paying a fee.

I understand benchmarking tools are always biased and unrealistic as compared to real-world usage. Nevertheless, I would like to get an objective sense of the reading and writing throughput on these devices. In particular I would like to see if the NMMe M.2 can saturate the USB 3.0 port on my MacBook and the USB 3.1 port on my Mac mini.

Testing on:

  • MacBook Pro (Retina, 15-inch, Late 2013)
  • Mac mini 2018

I found a couple similar Questions (here & here), but they are 7-8 years old. I imagine things may have changed, now in 2019.

Thunderbolt 3 hub and external battery combo

I have found a few 72wh external usb-c battery that also can act as a usb2.0 hub, but it only delivers 45 watts at 15 volts.

I’ve found that 45 watts at 20 volts can slowly charge even my i9 vega 20 mbp, but does anyone have experience with only 15 volts?

Finally, has anyone found an external battery that can also be a thunderbolt 3 hub, or at least usb3.0 hub?

My vision is to leave my charger at work, and use something like this at home as both a power supply/charger, usb3.0 hub, and portable external battery for when I travel. Thanks!