Spy Rom -
You trusted that code. You had to. It was soldered to the motherboard or plugged into a socket. It wasn't user-writable. It was, by definition, immutable.
Similarly, a 1992 CIA internal memo (released partially in 2017) references a "Type-III firmware implant" for the Apple IIe, capable of surviving a full power cycle and disk swap. Its purpose: to monitor the word processor files of a certain Middle Eastern diplomatic mission. The technical brilliance—and horror—of the Spy ROM lies in its constraints. You have, at most, 8KB to 32KB of ROM space. The original OS or BASIC takes up 80% of that. You must squeeze your spy logic into the remaining bytes, without breaking any original function. spy rom
It’s called a (or "Shadow ROM"). And it remains one of the most ingenious—and chilling—pieces of hardware-level subversion ever deployed. What is a ROM, Really? Let’s start simple. A ROM (Read-Only Memory) chip is the DNA of a vintage computer. Unlike RAM, which forgets when power is lost, a ROM holds the machine's most fundamental instructions: the BIOS, the bootloader, the cassette or disk operating system. When you turned on an Apple II, a Commodore 64, or a TRS-80, the first thing the CPU did was jump to a specific address in ROM and start executing code. You trusted that code
That trust was the vulnerability. Sometime in the mid-to-late 1980s, intelligence agencies (the usual suspects: KGB, Stasi, CIA, MSS) realized that the ROM socket was the perfect dead drop. Instead of bugging a room or tapping a line, why not bug the computer itself—at the firmware level? It wasn't user-writable
A Spy ROM is a physically modified or completely custom ROM chip that looks identical to the original. But when the CPU reads from it, the chip doesn’t just return the expected BASIC interpreter or OS routines. It also executes additional hidden code.
