@zhuowei@notnow.dev hmm... okay I don't know if that can be done either. But in any case, physical OOB is gonna be tricky to exploit reliably.