Hector Martin

Don't care what it's used for there, as long as adversary has multiple control links in (probably multiple operators). Static thinking again. A few lines of code and dev will deploy other use in 15 minutes. Analysis needs to wait for control neutralization/isolation.

You said "How many of your raspis have an mmc1?" and I explained to you how the answer is ALL OF THEM (of this model). Are you going to ever admit you confused something completely benign for an IOC, or just keep bullshitting forever?

Look at some raspi boot dmesgs and you will get what I'm talking about. I do that so often I can sometimes pick out lines that are wierd as it scrolls by even. Please stop being patronizing. Maybe these folks are already on your some of your computers. Would you know?

I'm still waiting for a single piece of verifiable evidence that something is out of place. Where are these "weird" boot logs? Perhaps you should start considering that if everyone else can find a benign explanation for everything you point out, maybe the problem is in your head.

You seem to think my job is to convince you. My task's securing my computers. Ocasionally advice for others own good/public benefit. And pick big problems/threats for conferences so folks can work on. You think I'm crazy? Enjoy life in the Prepositioned Cyberasset Club.

*My* job is security, and when stuff like BadBIOS makes headlines it's an embarrassment to my field. *You* have a delusional paranoia problem, and I'm trying to help you because otherwise you'll convince other, less clueful people of your nonsense and it'll spiral out of control.

Meanwhile I consider such obliviousness to advanced attackers somewhat embarrasing. I think we have detente.

I'm cognizant of advanced attackers. They just don't happen to be your problem. Your problem is delusional paranoia.