The vulnerability was due solely to users running SSH (which is not installed except by jailbreaking) without changing the default root password. It's surprisin

The vulnerability was due solely to users running SSH (which is not installed except by jailbreaking) without changing the default root password. It's surprising that such a gaping security hole took as long as it did to be widely exploited.