Microsoft Explains Why the Surface Does Not Have Thunderbolt

This is also a problem that many Surface users have been wondering for a long time, and the new answer given by Microsoft is due to security issues of this connection protocol.

Basically, the Thunderbolt protocol uses DMA (Direct Memory Access), which means it can read and write data directly to the system RAM without having to go through the usual operating system or processor. This gives great data transfer speeds, but also means that a malicious device connected via Thunderbolt can directly access any component of your RAM, including items. important as Bitlocker keys and other encryption keys, or even spread malware to allow hackers to gain unauthorized access to your PC.

Regarding the issue of non-upgradable RAM, the reason given by Microsoft is also in the ability of security. All Surface devices have RAM that is soldered directly to prevent fraudsters who can use liquid nitrogen to maintain the state of the RAM chip without power, then transfer the chip to an external RAM reader and gain access to your RAM, especially the encryption keys.

In general, both of the reasons Microsoft have given are true, but it is clear that most users do not need to worry too much about them, because to do so, the attacker will have to have physical access. into your device. This level of security is probably more suitable for special purposes, such as PC systems used in government agencies, PCs of people holding important positions in business organizations. high chances of theft or access to illegal profits.

Interestingly, Microsoft introduced Kernel DMA Protection to protect the PC against direct memory access (DMA) attacks with PCI hotplug devices connected to Thunderbolt 3 port on Windows 10 1803. As such, The launch date of Surface devices with Thunderbolt 3 integrated is probably not far off.