Huge fines and a ban on default passwords in new UK law
I recall this fun bit of news:
[extremetech.com]
“ Bestowing terrifying new definitions on the phrases “backdoor vulnerability” and “security hole,” one of the world’s most luxurious toilets has been exploited by hackers. The smart toilet is vulnerable via its built-in Bluetooth radio, allowing hackers to remotely open or close the lid, flush the toilet, or, perhaps most perturbingly, activate the built-in bidet function.”
It had a hardcoded password of 0000 that could not be modified.
What is this password you speak of?
The box with the blinky lights your internet service provider gave you for broadband access if you use a home network is called a router. Most people never log into it to check its security settings. Most are administrated by the ISP, but there are changeable settings which improve security such as a long hard to guess password to log into the interface and wifi settings. Your router could be hacked from the internet or someone could hack your wifi if these settings aren’t properly secured.
No reason for mfgrs not to slap a label on the back with a unique login/password.
Even that would be a huge step up from admin/admin.