Posted Feb 3, 2011 14:07 UTC (Thu) by corbet (editor, #1)
[Link]
Yes, LD_PRELOAD. Not sure how that got through.
The preload was useful for logging, but even more useful for injecting crafted data into the Windows driver. That's how he was able to verify that he had the protocol right.