Googling for ATM Master Passwords

Posted by ryuzaki0 on Thursday September 21, 2006 @07:31AM from the that-should-probably-not-be-online dept.

default DOLLAR writes to mention an eWeek article following up on the ATM reprogramming scam pulled in Virginia Beach last week. A security researcher in New York has used a YouTube video, a few Google searches, and other legal methods to discover the master passwords to thousands of ATMs across the country. From the article: "Dave Goldsmith, founder and president of penetration testing outfit Matasano Security, in New York, did not say how he obtained the operator manual--which contains master passwords and other sensitive security information about the cash-dispensing machines--but an eWEEK investigation shows that a simple Google query will return a 102-page PDF file that provides a road map to the hack."

2 of 356 comments (clear)

Min score:

Reason:

Sort:

Re:The default password is... by Talondel · 2006-09-21 07:39 · Score: 5, Informative

Close. Actually it apears that it's 001234. http://www.tritonatm.com/en/service/manuals/07103- 00013C%20(FT5KUsrMan(3.0))file.pdf
Re:Giddy-up! by russ1337 · 2006-09-21 07:56 · Score: 5, Informative

Well you can always find more interesting things by doing a Google search for: [Confidential "not for public release"] Like this

This technique was posted on Boing Boing and Bruce Schneier a couple of weeks ago. Still. Plenty of good stuff out there.