PayPal Beacon Insecure Transport / Information Disclosure

PayPal Beacon firmware fails to check signatures, has a static root password, and uses insecure transport over HTTP.