This smells like:<p>- Underhanded C . . . maybe. Seems difficult to just insert a strcmp in the middle of a sensitive piece of the login path<p>- A compromised toolchain that is inserting the code<p>Would love to hear what Juniper has to say about it, but I doubt that they will, or will be allowed to say.