Looks like there's blog post about the whitepaper [1] which is a bit more informative without reading the PDF, and this was already discussed [2] via an arstech

Looks like there's blog post about the whitepaper [1] which is a bit more informative without reading the PDF, and this was already discussed [2] via an arstechnica article. [1] https://community.rapid7.com/community/infosec/blog/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play https://community.rapid7.com/community/infosec/blog/2013/01/... [2] http://news.ycombinator.com/item?id=5137353 http://news.ycombinator.com/item?id=5137353