The hidden risk of updatable firmware