Hacker News Reader

At least 2 of those interfaces support DMA to host RAM.. https://en.wikipedia.org/wiki/DMA_attack

D'oh. Somehow missed the fact that you were hardening the machine against attack.