Imagine a Thunderbolt display on a desk. The attacker builds a small box that plugs into the firewire port on the back and exposes the port over wifi (or runs a prewritten script). The target plugs in their computer to work and is rooted.