I think this is important, because if you can still access the USB drive and MS, a lot can still be done.... Can't it?
For instance, a simple tool to move files from a USB HDD/USB Drive to MS, or would the required drivers take more than 64kb?
Also, can the MS be used as a kind of ram to run programs from, instead of accessing the kernel just dump files to the MS and use them from there?
I may be talking out of the wrong orfice here, just a thought.
Is there a list of what user mode can access? Or is it just everything but RAM.