Huh, very interesting. As mentioned, I assume it's probably making use of the existing exploits against STM32 RDP1 but I'd really like to see some analysis of the device to see for sure.
Yes and why cooling to freezing might help! Slowing the clock presumably?
Yes and why cooling to freezing might help! Slowing the clock presumably?