Writing a firmware-only keylogger