An Energy and Commerce subcommittee hearing focused on the role of IoT devices in recent DDoS attacks. The attacks refer to when insecure IoT devices infected with Mirai malware hammered DNS provider Dyn in October. Focusing on the actual tech is not the way to go; technology is always evolving and the security industry, regulations and law are always playing catch-up. All three experts agreed that the time for passwords on IoT devices has come and gone; default or hardcoded passwords played a key role in the attacks.”]