from the timeline: >2025-01-29: Hirsch replies stating that these vulnerable systems are not following manufacturers’ recommendations to change the default pas

from the timeline: >2025-01-29: Hirsch replies stating that these vulnerable systems are not following manufacturers’ recommendations to change the default password this is why i like the 'secure by design' or 'secure by default' responsibility being put on connected product providers, e.g. EU CRA and implied in US M-22-09. i am always fearful of unintended consequences of regulation like this, but it does seem necessary in today's world.