Slashdot Mirror
Diebold ATMs hit by Nachi Worm
red floyd writes "The Register is reporting confirmation that Diebold ATMs were hit by the Nachi worm back in August. Apparently some Diebold ATMs run XP Embedded, and got hit with a variant of the RPC DCOM worm. Seems that they hadn't yet applied the available patch."
So does this mean that after each transaction, the ATM wires $20 to everyone associated with your bank account?
A new, secure, manageable BIOSwould fix their problem.
It's really Phoenix's fault.
sigs, as if you care.
why not OS/2 Embedded? I think that'll fall under the, "Secure-because-no-one-uses-it" model.
Non impediti ratione cogitationus.
Ahhh....but if you used a proper embedded operating system for an embedded device, you wouldn't be able to hire programmers who have completed a 6-week Visial Basic/.NET programming course at their local community college to write your business critical applications ;-)
-psy
Yeah yeah mod me down if you must but I'd feel much better having embedded Linux...
Have you forgotten where you posted this? Nobody gets modded down for picking Linux over MS.
Your favorite
1) Diebold produces ATMs with security holes to skim money
2) Diebold uses skimmed money to lobby for their electronic voting machines
3) Diebold uses code in voting machines to fix elections
4) Government by Diebold, Taxation by Diebold
5) PROFIT!
Funny that this banner ad was on the page when I loaded this article... It read: Making the right decision may save you millions... Making the wrong decision may cost your job
I remember thinking how weird it was to have my ATM suggest an exclusive opportunity to increase the length of my penis.
We have a new record! Someone didn't even make it all the way through the article TITLE. First, it was rtfa (the linked article). Then it was rtfa (the slashdot article). Now do we need to go to rtft (read the fucking title)? The article is about diebold ATMs, not voting machines.
====
Crudely Drawn Games
if some script kiddie hacks into the voting machines...President Jenna Jameson!!
That's not necessarily a bad thing...
Oooh... My Machiavellian little mind can't help but suggest:
1. Root a Diebold corporate server. Access their customer's VPNs for ATMs. If they don't patch their cash machines, you can bet their file-sharing is equally vulnerable.
2. Insert a worm into the ATMs.
3. Worm executes simultaneously worldwide. Diebold machines all dump their cash simultaneously.
4. Worm displays a message on the screen: This hack made possible by vulnerability X that MS patched on Y but Diebold didn't bother to apply. Think this is bad? They make VOTING machines too!
5. Sit back and watch as multinational banks sue Diebold into oblivion.
If government is too corrupt to fix the voting machine problem, then perhaps it is better to make it in the interest of someone very rich.
Disclaimer: If you actually do this shit, you've probably committed a "crime" in the legalistic sense... though ethically and morally you're definitely doing OK.
In Soviet Russia, sig types you!
This really gives me confidence for the upcoming elections.
Possible Winners:
1) RPC DCOM
2) General Protection
3) MafiaBoy
Used to be that American money was real honest-to-God GREENBACKS, not some funny, furrin looking fruit color with corporate logos on it.
Use to be that banks were always built, well, like banks, heavy, solid, safe looking hulking stone fortesses.
That's what the 80's green mono monitor always said to me. "We're interested in what's known and safe and secure, not flashy video ads to sell you stamps while you wait for your cash."
Now it's all "Did you see this week's twenty? It's got Jessica Lynch and a coupon for Chik-Fil-A on it!"
the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff
Schandenfreude
Stop it with the intellectual bukkake.
This is America, damnit. Speak Spanish!
"Oooh... My Machiavellian little mind can't help but suggest:"
My plan is a little more devious:
1. Root a Diebold corporate server. Access their customer's VPNs for ATMs. If they don't patch their cash machines, you can bet their file-sharing is equally vulnerable.
2. Insert a worm into the ATMs.
3. Worm executes on a specific machine at a specific time/date. Walk up to each machine and wait for it to dump its contents.
4. Laugh my rich ass off in the Bahamas, while multinational banks sue Diebold into oblivion.
As a bonus, #4 solves the Diebold voting machine problem as well.
I guess they were too busy not "fixing" their voting machines to worry about that little MS patch...
My bank, Purdue Employees Federal Credit Union, has biometrics (i.e. finger scanner) ATMs in several locations. One day I came to make a deposit and BLAMO! Blue screen of death. NT Kernel Protection error. I bet windoze is more widespread than you think in the banking industry (unfortunately), and not always in the somewhat-safer "windows lite" versions. Just wait until the US Navy has battleships and aircraft carriers running windows. Can clippy land an F-14? I doubt it.
today is spelling optional day.
If this word actually existed in the German language, it would mean "joy of shame"...
I refuse to believe that Germany doesn't have a word for that.
AccuVote results are in:
Yes: -35,002
No: 8,667,000,002
Cowboy Neal: Orangutan
The enemies of Democracy are