We’re often quick to blame hardware manufacturers for bad default usernames and passwords, but as the folks at CommitStrip highlight, we’re all equally to blame for choosing convenience over security.  (OK, it is true that manufacturers still need to give us the ability to change the defaults but that’s a comment for a future post).

What has your organization done to make sure that default usernames and passwords aren’t being used?  Can you think of some devices you own that you’ve kept the default security credentials?