Hector Martin

No not really. It boots from the network without cable. it boots from the network without a cable at different speeds depending on what non-network thing you plug into it.

Considering confirmed sigdev "enabled" devices and chipsets these days I think everyone should follow @dragosr example, regardless if it is the case here or not, at least let him finish first or it will come across as gaslighting.

It's not gaslighting when it's real. Telling people to be paranoid about perfectly normal things does nobody any good. We've already gone through this and it didn't end well. If he *actually* found an implant or credible evidence of one it would be a different story.

Asking about suspicious things on Twitter is good. Immediately jumping to conclusions and shouting "implant!" is bad. Ignoring all the subsequent replies from experts that tell you what you're seeing is normal is mental illness.

I’m not immediatey jumping to conclusions. Just trying to explain the code that shows up on airgapped boxes. The fact that they are compromised is certain, just need to figure out how.

When BadBIOS happened and you were "certain" you were compromised, all the evidence you showed ended up being perfectly normal stuff. I don't recall a single shred of hard evidence for any malware every coming from that story. Which is the same thing that's happening this time.

Because it’s perfectly normal to have software packages you don’t install just appear on airgapped systems.