I have no words for this security nightmare of an ATM

[Red Squirrel]

http://krebsonsecurity.com/2016/07/would-you-use-this-atm/#more-35622

Wow. All the network gear/cabling is just exposed, AND it's wireless. :awe:

 

[glenn1]

http://krebsonsecurity.com/2016/07/would-you-use-this-atm/#more-35622

Wow. All the network gear/cabling is just exposed, AND it's wireless. :awe:

We ought to have a contest to guess who can get the closest to the "convenience fee" the operator of this ATM charges. I'm putting my claim in for $4.50.

 

[XavierMace]

You'd be amazed at how poor the security is on a lot of ATM's.

 

[lupi]

If you voluntarily accept those atmosphere fees you deserve the security that goes with it.

 

[NikolaeVarius]

Watched a few DefCon speeches about ATMs. Was pretty interesting.

There was one ATM that ran with windows xp embedded with the standard UI disabled and would auto route to the ATM application. I don't quite remember the exact specifics, but the machine would go through the standard boot sequence and then run a script that set up the ATM environment. The guy bypassed it by having it boot another script first that hijacked the boot process and then installed the standard windows shell and enabled it giving him full control of the ATM.

If you voluntarily accept those atmosphere fees you deserve the security that goes with it.

This is why you use a bank that refunds fees

 

[EOM]

You'd be amazed at how poor the security is on a lot of ATM's.

I read a story maybe last year about ATMs running windows code.... like 98 or xp

 

[monkeydelmagico]

some people will stick their cards in any slot that comes along.

 

[lupi]

Reminds me of a sitcom from a couple years ago where the son went into the standalone atm buisness.

 

[DrPizza]

If I need to get cash and I'm out of town, I go to a real bank's ATM, not some convenience store ATM. You've got to be nuts to trust those things with your account information, especially since you're also putting in your pin. Nothing can go wrong, right?

 

[edro]

It's probably all cardboard and there is a guy hiding inside.

Still, it's all encrypted, right?

 

[TallBill]

It's a DNC secured ATM, perfectly secure.

 

[MtnMan]

Don't even have to bring a console cable, they left one hanging out of the console port, convenient.

Password recovery is now part of the CCENT (ICND1) certification now!

 

[bononos]

It's probably all cardboard and there is a guy hiding inside.

Still, it's all encrypted, right?

Thats what I thought, the security could be compromised if someone had physical access to swap the guts out of the machine otherwise the network comms is still encrypted.

 

[Ichinisan]

If I need to get cash and I'm out of town, I go to a real bank's ATM, not some convenience store ATM. You've got to be nuts to trust those things with your account information, especially since you're also putting in your pin. Nothing can go wrong, right?

This. I've made exceptions a couple times at a flea market out-of-town (no bank ATM anywhere near it). It always caused me great anxiety (though I haven't seen any fraud yet).

 

[pete6032]

That's how a lot of the ATMs in the Chicago subway system look. I see those every day.