Hijack actually contains NO CODE to flash a kernel. Instead, it creates a /proc directory entry for the Empeg flash driver's "kernel" partition. Writing a file to "/proc/empeg_kernel" (using, say, kftpd for the transfer) therefore sends data to the flash driver, which duly writes it to the flash memory space reserved for the kernel.
Cool, eh?
There are also kernel "devices" for other flash areas, and this same mechanism could be tweaked to allow the Logo Editor to upload new logos if we wanted.
Personally, I'm thinking of a Disk-based app for the player that would have a collection of 100-200 logos on disk, and after each bootup it could flash a randomly-chosen new one for display on the next boot..
..