What better way to disguise a backdoor than an apparently deliberate &quot;debug&quot; utility? I mean, if they have to distribute source code sooner or later (which they do since Linux is GPL), this <i>looks</i> much more innocent than any super obfuscated &quot;hidden&quot; source code that would be discovered eventually anyway.<p>Not saying this was the actual intention here, but it&#x27;d be a plausible way to go about it. It certainly appears the backdoor is running on lots of devices in the wild before it got noticed (even when it&#x27;s this obvious in the diff(!)), so &quot;mission accomplished&quot;? :)