The Patching Friars' AlmanacA calendar of CVE saints

December 5

DaMAgeCardHoly card for damagecard, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 SD EXPRESS DaMAgeCard PER RIMAM IN MEMORIAM
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Blessed DaMAgeCard, Who Slips In Through the SD Slot

Patron of SD cards, handheld consoles, and people who plug in whatever they find in a drawer.

Life

In December 2024 researchers at Positive Technologies showed that the new SD Express standard, in order to be fast, connects the memory card straight to the PCIe bus. A modified card, built around a Raspberry Pi Pico and the PCILeech framework, could therefore read and write the device's RAM over DMA, especially where the IOMMU was not enabled. An old trick, in their own words, coming through a new door.

Prayer

O Blessed DaMAgeCard, who hides inside a card weighing a few grams, keep our IOMMUs on and our drawers tidy. Amen.

How to celebrate

Celebrated by enabling the IOMMU in the firmware and eyeing every gifted SD card with suspicion.

Small card, big access.

Technical record

Disclosed on
December 5 2024
CVE
No CVE: blessed, not yet canonized by MITRE

Sources: swarm.ptsecurity.com · web.archive.org

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.