Sorry, couldn't get to this until this morning.
I ran the commands you listed, seemed to work, however -
the FW version is still listed as 20
the startup hangs on connecting...
NeTVBrowser does not work
Here is the transcript from the restart script
-------------
Last login: Fri Oct 28 19:32:05 2011 from 192.168.1.100
root@chumby-silvermoon-netv:~# mount -o remount,rw /
root@chumby-silvermoon-netv:~# touch /test-updates
root@chumby-silvermoon-netv:~# mount -o remount,ro /
root@chumby-silvermoon-netv:~# /usr/bin/poll-update-server.sh
gpg: Signature made Fri Oct 28 23:18:08 2011 GMT-5 using RSA key ID 50572998
gpg: NOTE: trustdb not writable
gpg: Good signature from "chumby industries PTE LTD signing authority 1 (This ke y is used to sign updates.) <bunnie@chumby.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: B979 B055 4E8D C30D FDF9 027F DFDE FC11 5057 2998
+ exec
+ NEEDS_REBOOT=0
+ BIG_UPGRADE=0
+ NEW_PACKAGE_LIST=/tmp/update.new-packages
+ grep -q builder_silvermoon_netv /etc/opkg/arch.conf /etc/opkg/chumby.conf /etc /opkg/local-all-feed.conf /etc/opkg/local-armv5te-feed.conf /etc/opkg/local-chum by-silvermoon-netv-feed.conf /etc/opkg/opkg.conf /etc/opkg/opkg.conf-opkg /etc/o pkg/secring.gpg /etc/opkg/trustdb.gpg /etc/opkg/trusted.gpg
+ ls -l /bin/sh
+ grep -q bash
+ grep -q 'option offline_root /' /etc/opkg/opkg.conf
++ md5sum /usr/lib/libopkg.so.0.0.0
++ cut '-d ' -f1
+ '[' xbbae7819c5bc8ce5a79aff54ee99ff98 = x773860982b032b3840271f444bd4141e ']'
+ logger -t update 'Downloading package list...'
+ opkg update
++ opkg list-installed kernel-modules
++ wc -l
+ '[' 2 -gt 0 ']'
+ logger -t update 'Attempting to remove kernel-modules'
+ opkg upgrade task-machine-base
+ opkg remove kernel-modules
+ opkg list-upgradable
++ wc -l /tmp/update.new-packages
++ cut '-d ' -f1
+ NEW_PACKAGE_COUNT=6
+ '[' x6 = x ']'
+ '[' 6 -le 0 ']'
+ logger -t update 'Fetching 6 upgraded packages.'
++ chumby_version -f
+ fwver=20
+ '[' 20 -lt 20 ']'
+ match='NeTVBrowser -qws UpdateDone &'
+ replacement='curl -d "cmd=javascript\&value=window.status=\'\''<xml\><cmd>Upda teDone<\/cmd><value>0<\/value><\/xml>\'\''" http\:\/\/localhost\/bridge \nif \[ -z "$(pidof NeTVBrowser)" \];\nthen\n\t\/etc\/init.d\/chumby-netvbrowser restart \nfi'
+ mount -o remount,rw /
+ sed -i 's/NeTVBrowser -qws UpdateDone &/curl -d "cmd=javascript\&value=window. status=\'\''<xml\><cmd>UpdateDone<\/cmd><value>0<\/value><\/xml>\'\''" http\:\/\ /localhost\/bridge \nif \[ -z "$(pidof NeTVBrowser)" \];\nthen\n\t\/etc\/init.d\ /chumby-netvbrowser restart\nfi/g' /usr/bin/chumby-netvbrowser-upgrade.sh
+ sync
+ mount -o remount,ro /
+ curl -d 'cmd=javascript&value=window.status='\''<xml><cmd>UpdateCount</cmd><va lue>6</value></xml>'\''' http://localhost/bridge
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 196 100 110 100 86 1644 1285 --:--:-- --:--:-- --:--:-- 2200
+ egrep -q '^(kernel|u-boot)' /tmp/update.new-packages
+ opkg --cache /var/lib/opkg/tmp --download-only upgrade
+ logger -t update 'Update downloaded successfully, and are ready to be installe d.'
+ '[' 20 -lt 20 ']'
+ curl -d 'cmd=javascript&value=window.status='\''<xml><cmd>UpdateReady</cmd><va lue>6\|\~\|0</value></xml>'\''' http://localhost/bridge
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 203 100 110 100 93 2134 1804 --:--:-- --:--:-- --:--:-- 2291
+ '[' 0 -eq 1 ']'
+ logger -t update 'Script finished'
+ do_cleanup
+ rm -f /tmp/update.new-packages /tmp/update.28362.sh /tmp/update.28362.sh.sig
+ exit 0
root@chumby-silvermoon-netv:~#
------------------
here is the output from hello
<xml><status>1</status><cmd>HELLO</cmd><data><guid>169C9111-D428-6B2E-9D72-5530FFCE8B27</guid>
<dcid><chum>
<vers>0002</vers>
<rgin>0001</rgin>
<skin>0001</skin>
<part>1000</part>
<camp>0006</camp>
</chum></dcid>
<hwver><cpi version='1.0'>
<response_list>
<response type="hwvr" result="success">00000000000000000000000000060000</response>
</response_list>
</cpi></hwver>
<fwver>20</fwver>
<minAndroid>0.6.3</minAndroid>
<minIOS>0.0.0</minIOS>
<flashver>10.62.0</flashver>
<internet>true</internet>
<mac>48:5D:60:A3:AC:50</mac>
<ip>192.168.1.101</ip>
<network>
<interface if="wlan0" up="true" link="true" ip="192.168.1.101" broadcast="192.168.1.255" netmask="255.255.255.0" gateway="192.168.1.1" nameserver1="68.87.71.230" nameserver2="68.87.73.246">
</interface>
</network></data></xml>