My Shield was removed from my network shortly after the SP1 update as I never could get bridge mode to work correctly with my network. Thanks to everyone here for keeping this thing alive, you inspired me to dust off my Shield and try again with a new "three dumb routers" setup.
My Shield fired up fine and according to the beginner's guide here I did the newest hotfix (8.3) and ran fw_upgrade get the following messages at the end:
tar: BL/illegal/domains: not found in archive
sh: can't open '/etc/itus/update_blacklist.sh'
Did I miss something by skipping to the latest hotfix?