Finding thousands of exposed Ollama instances using Shodan

I’d expect Cisco to publish an article on thousands of Cisco devices with default passwords still there in the open.

Definitely not credible to speak about ML stuff and of course - Ollama has never been production-ready in the sense iOS (Cisco’s) was.

How is it Cisco’s fault that a lot of network administrators are incompetent and don’t change default passwords?

Cisco is incredibly (in)famous for having hardcoded backdoor accounts in their products.

Having default passwords for a product that is designed to be connected to a network that the users are not forced to change is incomprehensible incompetent for any product produced the last 25 years.

By forcing them to change the defaults, like Ubiquiti does, for instance.

If you need to be forced to change the default password on Cisco products you probably shouldn’t be using them.

Not allowing default passwords is for the greater good. Making it harder to install is a feature in this case.

Can't you just flip that and say that if you need there to be a default password, you shouldn't be using a Cisco product? And if nobody using a Cisco product needs a default password, then why does one exist at all?

Cisco does more than just sell equipment. Seeing this from their “threat intelligence research organization” shouldn’t be any more surprising than seeing the same from Google via Mandiant.

Yes