Bowes, a consultant with Dash9 security and a developer for security scanningtool NMap, says he collected the passwords to help researchers figure out how users choose passwords and make the authentication process more secure.
His company has released a scanningtool to find vulnerable UPnP devices, and suggests users disable UPnP on both any endpoint devices that use the protocol on their internal network as well as their Internet router.