[anitil]

The article was very light on details.

I wonder if this is more along the line of finding an exposed database in the wild, or tracking down OEM suppliers and buying samples.

It's hard to love people doing this, because they could have disclosed this privately, but I think it _is_ fair to impose a high cost on not ensuring security, and this is one way of doing that.

[anitil]

Wow MuddyWater's page looks terrible, but the report can be downloaded here : http://www.muddywatersresearch.com/research/stj/mw-is-short-...

You have to agree to some ... interesting ... terms of use including not to distribute the link above, but I guess that ship has sailed.