Eireann Leverett, the researcher who found the Endurance customer, wrote in a master's thesis last year that he had found 7,500 control devices connected to the Net, more than 80 percent of which did not require a password or other authentication before allowing a visitor to interact with the machines.