I have been hearing rumors that it is true and even one vendor is looking into it because they are worried the factory was doing just that.
Enter the ip address in your browser.
This should bring up the web interface.
Change the network information and click the green button.
Change the pool information and click the red button.
I had to clicked the buttons a couple of times to get it to take.
I would not trust any pre-installed software. decoding compiled code could yield the discovery that every 1 out of 100th has went to some strange stratum you did not enter.... hmmmm.
it's why I'd run an ip sniffer in front of it or just a firewall that only permits connections to know sources. I found a bunch of odd connections even on my gridseeds that I blocked.