Well, it's not so much about weak passwords as it's about a single password being default across all installations of the app. I can't think of any instance of

Well, it's not so much about weak passwords as it's about a single password being default across all installations of the app. I can't think of any instance of that happening with Macs but I haven't been using Macs for more than a few years so it may have happened "before my time". The point is though, it's arguable that (if background process were allowed and the same level of system access was allowed) such a configuration would never have passed the App Store approval process. Granted, I don't know of any apps that have been rejected because of password related security concerns, but I also can't think of any apps that have a standard, universal default password. It's honestly such a wildly irresponsible thing to do I'm surprised it happened at all on any platform without some kind of community uprising involving pitchforks and torches. [edit: apparently the password is already on the account in all iPhones, the SSH app just enables SSH and that user account. Still bad and still some level of irresponsibility, but not quite as bad as I thought, and still no way anything like this would make it through the App store approval process.]