Philips Hue Bridge 2.0 - Getting Root (Rooting)

This wonderful little device runs Linux! See oflynn.com/?p=706 for details, and I have more stuff in my BH USA 2016 talk & white-paper (to be published soon, will link from here).
Attack here is same idea as wink attack (see en.wooyun.io/20.... The u-boot attack is fairly well known, see for example pepe2k found this out as well independently of me: forum.openwrt.....
[Originally uploaded 11-JULY but didn't hit 'publish' until 25-JULY/2016, so timestamp is a little off oops]