Backdoor account discovered in more than 100k Zyxel firewalls, VPN gateways

Automated testing needs to be able to check that any dev/debug code doesn't exist in production.

(Only works if the dev/debug code is added in some sort of properly planned and documented way I guess.)

You seem to assume that this was a mistake. What is to say that this was not deliberately planted albeit with plausible deniability?

Previous discussion: https://news.ycombinator.com/item?id=25539876

Most people will be suspicious of a Chinese router having backdoors when it’s probably the consequence of shoddy programming.

Yes, maybe shoddy programming, maybe plausible deniability.

I thought zyxel was taiwan based. Also, big customer base in soho/ government (atleast in India, thanks to vendors who design their networks for them).