The initial report from last year has interesting, if sadly unsurprising, background on how/why so many of these embedded devices have wound up this way.

http://blog.sec-consult.com/2015/11/house-of-keys-industry-w...