This is not about USB.org (a lot can be said about them but thats another issue).

ATMega chips (Arduino) can be programmed over SPI, a simple serial protocol, and its well known how to hack this...