https://www.nomotion.net/blog/sharknatto/
AT&T gateways are using hardcoded SSH passwords. This means that anyone that knows the username and password can take over a gateway and even reflash it.
How fucked are we?
>have AT&T
>try to SSH into gateway
>connection refused
Wow, it's fucking nothing