Holy megacycles Batman! This thing is made for hacking. You telnet into the thing, delete one line in an XML config file, and then reboot. Whiskey-Tango-Foxtrot!?
Here's how the screen looks before and after, and a view of the 120 MHz signal on the scope. There's a bit of amplitude ripple as you sweep up from around 50 MHz.
Nice video but the one I have needs a login to get past.
maybe they changed the firmware. The EEVBlog forum most probably has information on this hack and any developments.