> Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore > Law #2: If a bad guy can alter the operating syst

> Law #1: If a bad guy can persuade you to run his program on your computer, it's not your computer anymore > Law #2: If a bad guy can alter the operating system on your computer, it's not your computer anymore From: https://security.meta.stackexchange.com/a/988 https://security.meta.stackexchange.com/a/988 If the firmware/software on these devices isn't open sourced and can be remotely updated/flashed, then of course the manufacturer can access every bit of data the device handles. It's important that we audit all telecom equipment carefully before deploying it, because they deal with lots of very sensitive data.