I have similar admiration of hardware hacks. My current favorite is the one that dumped the SecureROM out of the iPhone 6 via PCI-e: http://ramtin-amin.fr/#nvm

I have similar admiration of hardware hacks. My current favorite is the one that dumped the SecureROM out of the iPhone 6 via PCI-e: http://ramtin-amin.fr/#nvmedma http://ramtin-amin.fr/#nvmedma, http://ramtin-amin.fr/#nvmepcie http://ramtin-amin.fr/#nvmepcie I'm partly impressed by the tooling used; most of the coolness (to me) is the author's self-confidence in his hunch that the SoC _didn't_ have its MMU set up properly, and the way he followed his nose in determining that he was probably right. I still wonder exactly how much was sunk into the project, before it was possible to determine that the MMU was indeed broken. Heh.