[steve-b]

the attack involves luring users to malicious sites where a device's default password is used to redirect them to bogus sites

Anybody who leaves a device set at the default password might as well be participating in a bareback orgy at a Port-au-Prince bath house.

[xcamel]

That's my take on it...