I remember coming to the conclusion at the time that the security researcher must be kind of going nuts or something; doesn't seem quite so nuts now. Surely a professional would spot a rogue chip or device though?