I found a pretty bad exploit of the Livebox 1.1 back in 2012. I was trying to find a way to replace the shipped firmware by OpenWRT. Never heard back from Sagem/Orange but the vuln was quietly fixed in a later release. I never knew if they never acknowledged it on purpose or fixed it by accident! Funny to see this on HN. Brings back good memories.