Context - these two twitter threads: https://twitter.com/whitequark/status/1175692789171884032

>so apparently most unmanaged switches have a 8051 connected to the switch fabric inside. would it occur to you that pretty much any switch on your network could be monitoring or injecting traffic? sure would not to me

https://twitter.com/whitequark/status/1175692567150653440

>i wasn't previously aware that it's possible (it does makes sense i guess? doing switching entirely in gateware is more risky), and it's an absolutely incredible placement for a near-undetectable implant