It's bad; it's not exceptionally bad compared to similar devices though. So I agree with you. I do think embedded devices as a whole are getting a lot more att

It's bad; it's not exceptionally bad compared to similar devices though. So I agree with you. I do think embedded devices as a whole are getting a lot more attention lately - because they're so fun to hack. A consumer home router is often quite similar in terms of hardware to a Linux box from say 1995 (with differences due to Moore's law versus Kryder's law). 20 years as a rule of thumb is OK. Unfortunately the development practices you see tend to be 20 years out of date as well [shoddy, non-memory safe code, with no automated tests, talking to the network]. This is partly why hacking embedded devices is fun; it's like the 90's again! [I think every pentester has dreamed about the idea of being transported to 1995, knowing what they know now...]