This is super badass! I guess a lot of Proper Security People might say "whatever.. this requires physical access and once you have physical access you can comp

This is super badass! I guess a lot of Proper Security People might say "whatever.. this requires physical access and once you have physical access you can compromise anything", but to truly say you can compromise any physically accessible system I'm sure you need large amounts of skill and resource. Beating FDE without doing something like [1] is really impressive to me. This is also a really interesting viewpoint on machine/protocol design. [1] https://citp.princeton.edu/research/memory/media/ https://citp.princeton.edu/research/memory/media/ Edit: Also I wonder if there would be much worth in adding kernel interfaces to say "a new DMA-capable device was hotplugged - userspace should ask the user whether we should give them DMA access"? That would allow you to protect against these attacks without having to disable all your biz.