Large telecoms in Bulgaria are also ISPs and there is a common practice to give out “free” Wi-Fi routers to customers. Last time I wrote about the Smartcom Ralink router and its insecure default Wi-Fi passwords. This time I will look into the TP-Link EX220 router which is being deployed by A1. My main motivation for this research was their ridiculous policy of forcing customers to use this router and not allowing them to use their own.