How do you go from knowing the location of memory to actually doing an attack if the memory is read protected? That's the part I don't get.