[stgl]

I had the same idea, but no, I tried with a second, untampered one and I also got a working shell. So it does not seem to be dependent on the tamper state.

[numpad0]

wtf? are you saying the shell can be hypothetically drilled for root access without triggering the tamper detection? that'll be ACTUALLY bad...

[fp64]

I think in the article it was even stated that the port is even accessible without drilling!