Microsoft explains why the Surface does not have Thunderbolt and cannot upgrade RAM

It can be said that Microsoft is late at the 'party' named USB-C. As the USB-C connectivity standard has become extremely popular in the technology world and equipped by many major laptop manufacturers on its products, Microsoft has just announced plans to use this connection standard. on expensive Surface devices. However, even when USB-C appeared on the Surface, Microsoft still disappointed many by ditching the ability to support Thunderbolt - a technology that makes transferring data much faster, and generally more flexible.

This is also a problem that many Surface users have been wondering for a long time, and the new answer given by Microsoft is due to security issues of this connection protocol.

Basically, the Thunderbolt protocol uses DMA (Direct Memory Access), which means it can read and write data directly to the system RAM without having to go through the usual operating system or processor. This gives great data transfer speeds, but also means that a malicious device connected via Thunderbolt can directly access any component of your RAM, including items. important as Bitlocker keys and other encryption keys, or even spread malware to allow hackers to gain unauthorized access to your PC.

Regarding the issue of non-upgradable RAM, the reason given by Microsoft is also in the ability of security. All Surface devices have RAM that is soldered directly to prevent fraudsters who can use liquid nitrogen to maintain the state of the RAM chip without power, then transfer the chip to an external RAM reader and gain access to your RAM, especially the encryption keys.

In general, both of the reasons Microsoft have given are true, but it is clear that most users do not need to worry too much about them, because to do so, the attacker will have to have physical access. into your device. This level of security is probably more suitable for special purposes, such as PC systems used in government agencies, PCs of people holding important positions in business organizations . high chances of theft or access to illegal profits.

Interestingly, Microsoft introduced Kernel DMA Protection to protect the PC against direct memory access (DMA) attacks with PCI hotplug devices connected to Thunderbolt 3 port on Windows 10 1803. As such, The launch date of Surface devices with Thunderbolt 3 integrated is probably not far off.