[simgidacav]

How would you implement a decent backdoor in your hardware? Would it be supported by software? How do you force the TCP/IP stack of someone's FOSS operating system to send unwanted data?

IMHO he was referring to some backdoor in software. How about a nice ubiquitous piece of software? Windows? JVM?

[tlrobinson]

While it's a bit tinfoil hat, it's not impossible that there could be hardware backdoors in processors or other hardware triggered by a very specific sequences of packets.

[mattstreet]

What would be hard is also making sure that packet sniffers in the middle wouldn't be able to detect it. Specially with all the varieties of router hardware. Are we going to have a backdoor in all of them that prevents passing on that data?

[XorNot]

And you know, given the tens of thousands of people involved in chip design, are we to think that absolutely no one, anywhere, would've leaked that there was some anomalous circuitry in the chip designs which they were told not to worry about it?

[cyrus_]

It would probably be added pre-fabrication, not right in the chip design.

[nitrogen]

It could also be added in the firmware, either during manufacture, or via zero-day exploits in the firmware. The largest entries in /lib/firmware are all for network cards. Since the NIC has DMA access and can interrupt the CPU, the NIC firmware could be used to attack the OS.

There's still the question of packet sniffing by an intermediate device. The attacker would need to control (the network interfaces of) every device in the chain, use the ability very rarely to avoid detection, or hide data in packet metadata that is later decoded by interception equipment. This third option is probably fairly straightforward on any NIC with TCP checksum offloading.