Schneider Electric still shipping passwords in firmware

You'd think a vendor of critical infrastructure would at least pretend to care about security

That "don't use hard-coded passwords" infosec rule? Someone needs to use a needle to write it on the corner of Schneider Electric's developers' eyes so they don't forget it."