Re: It's probably just a false flag case...
It must be stored somewhere. Either in the flash, a serial eeprom, or perhaps they are using a hash of the processor internal hardware serial numer + algorithm + 4 digit code.
If the processor has a jtag port for things like initial factory firmware load or debug purposes, then that provides access to all memory and peripheral devices on the system. Not saying it's easy, but it could be done...
Biting the hand that feeds IT
