Surely they'll need their own CPU, Motherboard Chips, RAM, Ethernet Cards, Graphics Cards, HDD as well.
Why should software be the only attack vector?
Why should software be the only attack vector?
Based on what I've read (which admittedly isn't a whole lot), it sounds like they need to take a few minutes to read Ken Thompson's "Reflections on Trusting Trust"[1].
1. http://www.cs.uiuc.edu/homes/kingst/Research_files/king08.pd...