1 reply to this topic

[Roco]

Flaws in the design of some ATMs make them vulnerable to hackers looking for a payout.
By Reuters, 28 Jun 2010 at 08:27
Security experts will demonstrate ways to empty a cash machine of its contents, at the Black Hat security conference this week.

Barnaby Jack, head of research at security firm IOActive Labs, a Seattle-based security firm, will demonstrate methods for "jackpotting" ATMs at the event.

Jack declined to discuss his techniques before the conference. But "ATMs are not as secure as we would like them to be," conference founder Jeff Moss told Reuters, ahead of the event.

"Barnaby has a number of different attacks that make all the money come out."

Banks may fear that criminals will adopt Jack’s methods. But Moss said that going public will raise awareness of the problem among ATM operators and prompt them to tighten security.

One potential route of attack is via communications ports that are sometimes accessible from outside an ATM, Moss said.

"You want everybody to know there are possible ways to jackpot these machines, so they will go and get their machines updated," he said.

Joe Grand, a hardware security expert, said he was not surprised to learn of Jack's research.

"People are starting to realize that hardware products do have security vulnerabilities. Parking meters, ATMs, everything that has electronics in it can be broken," Grand said. "A lot of times a hardware product is just a computer in a different shell."

http://www.itpro.co....-of-jackpotting

[zalternate]

Flaw is called Windows.  
Or what happens when you don't make a dedicated OS program for the ATM without the extra Windows crap.



http://www.engadget....d-gets-painted/

Quote

Although we wouldn't expect to find the latest release of Photoshop on your neighborhood ATM, it's not so far fetched to think that Paint would be left on a Windows-based ATM. We've seen a recent boost in cash machine hacking of late, and while this latest attempt doesn't siphon illegal coinage out of the slot, it does make for quite a laugh. Joining the pitiful  array  of other Windows-powered mishaps, a sharp cameraphone-toting individual spotted a local ATM that had a beautifully hand-crafted Paint message on the front screen in place of the typical "Insert your card to begin transaction," and while we've already said too much about a picture that speaks a million words, be sure to click on through to see how accessing an ATM's start menu can lead to all sorts of mischievous mayhem.

Attached Thumbnails

•