Bruce Schneier did an interesting writeup about a month ago about the fundamental problems behind router (and other embedded device) security:
> The problem with this process is that no one entity has any incentive, expertise, or even ability to patch the software once it's shipped.
https://www.schneier.com/blog/archives/2014/01/security_risk...