AFAIR, this is not the case. Although the CPU drives the address bus
and almost everything else, it does not drive the data bus - resulting
in something being written into this area, but not what you want.
It happens to almost always write the contents that were on the data
bus immediately before your write attempt. If you can convince the
VIC to access a specific byte immediately before your write attempt,
you can use this trick to write into these RAM locations.
No. In fact, writing is the more difficult part of it.
This is true.