>And this is why we need security vulnerability scanners that check for default credentials :-( Instead of telling people to change the password, they should re

>And this is why we need security vulnerability scanners that check for default credentials :-( Instead of telling people to change the password, they should really enforce the change with a one-time script prompting the user on the first login. SSHD requires RSA encryption and disallows password based auth by default though, so it's meaningless if the attacker doesn't have your key in the first place.