reprogrammed
Latest
ATM hack uncovered, financial freedom abounds?
You're probably familiar with the Virginia Beach trickster who reprogrammed an ATM to shoot out 300% more money than was debited from his account, but now it seems his "discovery" might have been widely available all along. Dave Goldsmith, a computer security researcher at Matasano Security, began to dig a little deeper once the news broke, and thanks to the oh-so-disclosing CNN video, secured the machine's model and maker: a Tranax Mini Bank 1500 series. Reportedly, he then acquired a (legal) copy of the ATM's user's manual, which conveniently spelled out "how to enter the diagnostic mode, default passwords, and default combinations for the safe." Once the cash-spewing gizmo is in "Operator" mode, the only thing standing between you and illegitimate funding (aside from your conscience) is a password, and since default passwords are plainly listed in the manual, it's up to the installation crew to actually insert a more secretive alternative. While we assume Tranax has been hastily sending memos to stores who (currently, at least) use its machines, you'll probably notice the unmodified machines by the insanely long lines preceding them (or a mysterious lack of cash available to disperse).Update: It looks like Tranax Technologies is stepping to the plate and planning a "software update" that forces installers to change the default password before it goes into service. The company has stated that the patch should be ready "in a matter of weeks," but it can't "force operators of currently installed ATMs to install it". [Via Wired Blogs]
ATM reprogrammed to disperse extra cash
Although ATM trickery has been going on for some time now, it typically deals with some sly guy jacking your data when you least expect it and withdrawing massive (or not) quantities of cash from your checking account. 'Twas not the case at all, however, in a recent reprogramming effort at a Virginia ATM, where a clever individual somehow fooled the computer into thinking it was dispersing five-dollar bills while it actually shot out twenties. Essentially, the suspect's balance was only debited for the amount he requested, yet he gleefully received four times that amount from the helpless machine. It was stated that the ever-joyous trickster couldn't resist returning only minutes after his first bonus score to give it another go, but he won't be going back anytime soon: now he's got the boys in blue tracking him down. One of the more ingenious acts of programming we've seen lately (it's a shame Intel's not hiring), it still was a loophole not to be exploited, so if you see a fellow in Virginia Beach throwing down on 4:1 odds, stay sharp.
