Ars Technica: UK outlaws awful default passwords on connected devices
If you build a gadget that connects to the Internet and sell it in the United Kingdom, you can no longer make the default password "password." In fact, you're not supposed to have default passwords at all.