Technically it's pwned, but you are still limited by the amount of time you have for reverse engineering, implementation and validation. For example, it seems t

Technically it's pwned, but you are still limited by the amount of time you have for reverse engineering, implementation and validation. For example, it seems that they obtain storage area by calling some kind of drive's own reserved space allocator, without hacking it to hide this usage from host queries. That's clearly a "limited hack" with potential for improvement.