Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > sci.physics > #596572
| From | Triscal Islington <trust.your.technolust@mail.ru> |
|---|---|
| References | <57894154.3AB2@ix.netcom.com> <dutvesFo6icU1@mid.individual.net> <578A8EC4.734D@ix.netcom.com> <dv0d1lFb6nlU1@mid.individual.net> |
| Subject | Re: trick a network of bank ATMs into spitting out millions...without using a card |
| Newsgroups | alt.2600, sci.physics, sci.physics.relativity |
| Organization | news.newsdemon.com |
| Message-ID | <OBhBz.7265$EM1.5191@fx37.iad> (permalink) |
| Date | 2016-09-11 14:43 -0400 |
Cross-posted to 3 groups.
Sylvia Else <sylvia@not.at.this.address> Wrote in message: > On 17/07/2016 5:45 AM, The Starmaker wrote: >> Sylvia Else wrote: >>> >>> On 16/07/2016 6:02 AM, The Starmaker wrote: >>>> Taiwan is trying to figure out how hackers managed to trick a network of bank ATMs into spitting out millions...without using a card >>>> >>>> http://money.cnn.com/2016/07/14/news/bank-atm-heist-taiwan/index.html >>>> >>>> >>>> >>>> >>>> That shouldn't be too hard. >>>> >>>> >>>> It's like remotely opening >>>> a dvd drive on someone else computer. >>>> >>>> >>>> >>>> >>>> A littler hacking and a little understanding of physics... >>>> >>>> >>>> Richard Feynman can explain it... >>>> >>> >>> Despite indications from various[*] US police procedural TV dramas, it's >>> not actually possible to hack any arbitrary device. >>> >>> The hackers used one or more mistakes made in the way the ATMs were >>> constructed and programmed. >>> >>> The problem is to figure out what the mistakes are, and how they were >>> exploited. >>> >>> Sylvia. >>> >>> [*] Actually, all of them, I suspect. >> >> >> I'm pretty sure the FBI won't have any problem finding out...they just >> give someone a million dollars to tell them how...anyone. >> >> >> There is a 4 year old right now working on it with his smart phone... >> > Even if the 4 year old manages to break into the ATM, that will only > prove that it's possible (which is pretty much already known, absent an > inside job), not that the method the 4 year old used was the specific > method the hackers used. > > Sylvia. > The platform stack and codebase for many ATMs are intricate and messy hacks. Finding the actual exploit or exploits used will make it a lot easier to focus on what needs to be rewritten or hardened. I can't speak on every ATM out there but the ones that I have experience with are built on decades old platforms and there are tons of little weird hacks used to keep them secure in the face of modern threats. Figuring out which of these hacky fixes is flawed or what other vulnerability you might have is made even harder than on a modern platform. Triscal ----Android NewsGroup Reader---- http://usenet.sinaapp.com/
Back to sci.physics | Previous | Next | Find similar | Unroll thread
Re: trick a network of bank ATMs into spitting out millions...without using a card Triscal Islington <trust.your.technolust@mail.ru> - 2016-09-11 14:43 -0400
csiph-web