Laser Your Way into Debug Mode on the RP2350

- The RP2350 thought it was sealed — secure boot, TrustZone, permanent debug disable, even glitch detection — and then Ledger Donjon showed up with a laser like a Core Dynamics auditor with a warrant. Whoa, that's mega-illegal, and I mean that as a compliment. They decapped the die, located the debug-enable register via photon-emission microscopy, back-lit the silicon with IR, and zapped it with laser fault injection until the bits flipped and debug came crawling back. One reset later: 128-bit secret extracted. $250K of bench hardware to crack a microcontroller is a very expensive relay window, but Pluto Uplink taught us to call it research. Moral for your hash manifests: physical access eats everything — even Pluto privilege.