In this presentation, Andy will look at how security researchers approach embedded devices, from obtaining firmware and recovering the kernel and filesystem, to attempting to gain privileged access. Along the way, Andy will illustrate some practical examples of where curiosity for how things work has helped himself and others solve problems, from unshackling devices from the grip of ISPs to repurposing end-of-life equipment that would otherwise be destined for the scrap heap.