A couple years back there was a similar presentation at Defcon that used routers that exposed UPNP to the public internet. I've linked the talk below:

http://defcon.org/html/links/dc-archives/dc-19-archive.html#...