600,000 GPS trackers left exposed online with a default password of '123456'

Default password is a danger for customers, but also for the vendor itself.