[kbenson]

I agree it doesn't point to the NSA directly, but I'm interested in how they use the default password as an infection vector. There are theoretically very interesting and sophisticated ways to do that, such is other infected routers on the network identifying source traffic from factory booted routers and initiating the infection at that point, which would have an extremely high chance of succeeding. In that case what would have been discovered is the reproduction method, and possibly not the initial infection method.