Interesting day at work yesterday with the whole 'esp32 has a backdoor' nothingburger thing. For what it's worth, we at Espressif have written a
formal response as well as a more
in-depth overview of the issue. I'd like to quote one of the lines from the formal response:
"Espressif also extends its gratitude to the security research community for promptly clarifying that the disclosure does not constitute a backdoor. Their responsible disclosures and continued support have been invaluable in helping users accurately assess the security implications and maintain the integrity of their connected devices. "
That was my sentiment exactly. I saw so many of you on my timeline calling out the bullshit and properly informing your followers and it warms my heart; thank you for that.
