I agree. The interesting thing here is not even code injected into the laptop, but about fake writes. Because the article states, that Verisign provide their K

I agree. The interesting thing here is not even code injected into the laptop, but about fake writes. Because the article states, that Verisign provide their KSR via the USB, which is than is PGP signed and that signature is checked visually. But what about, when the DNSSEC signatures are written to the USB stick, which then is handed over to Verisign to be implemented. They are also checked visually? Or can the USB stick (the implemented logic) forge the write and basically modify the written results?