'As Ribeiro notes, “D-link has a long history of vulnerabilities in HNAP”, many of them attributed to embedded device hacker Craig Heffner of dev/ttyS0.'
Was Craig Heffner responsible for creating the vulnerabilities or for the discovery of them? I suspect you meant the latter but the wording implies the former.