Comment by rustyhancock

How do people actually do this kind of work?

I can imagine working on the dumped firmware or update package.

But against the TV over the network without closed loop or access to RAM how could the model find and develop exploits?