Hacker Develops ATM Rootkit

alphadogg writes "One year after his Black Hat talk on automated teller machine security vulnerabilities was yanked by his employer, security researcher Barnaby Jack plans to deliver the talk and disclose a new ATM rootkit at the computer security conference. He plans to give the talk, entitled "Jackpotting Automated Teller Machines," at the Black Hat Las Vegas conference, held July 28 and 29. Jack will demonstrate several ways of attacking ATMs, including remote, network-based attacks."

Comments

Change your password every day

[For a Free Internet]

This will stop the Hackors from using your money. Personally I have no problem, because I gave all my money to Obama so he could give it to my bank so it could not be bankrupt so we could all RECOVER and HOPE for CHANGE with WAR WAR WAR WAR!!!!!!!!

OK, That's It!

[WrongSizeGlass]

I'm stuffing all my cash under my mattress from now on. If you can't trust a Deibold ATM, what can you trust?

Re:OK, That's It!

[MiniMike]

If you can't trust a Deibold ATM, what can you trust?

Weren't they voted as the #1 ATM?

Re:OK, That's It!

[Rogerborg]

If you can't trust a Deibold ATM, what can you trust?

Weren't they voted as the #1 ATM?

By 107% of the respondents.

ATM machine

[Anonymous Coward]

You almost made it through the whole summary without saying it.

Why can't the ATM suppliers just...

[drc003]

...just get a deal going with McAfee? Then there systems would be completely safe and always online!

Come on Taco, more imagination!

[Dystopian Rebel]

"from the well-that-doesn't-make-me-feel-better dept."

Where's the zip, the punch in your writing? This is the news business! If Larry Wall can be funny AND write Perl code, so can you!

Suggestions:

"from the All Your ATM Are Belong To Us dept"

"from the Who Says Cybercrime Doesn't Pay dept."

"from the Your Money Is In Good Hands -- NOT dept"

"from the Can We Have Human Tellers Again dept"

"from the It'll Be The Debit Of Me dept."

Re:Did anyone else read it as saying.....

[ProfMobius]

It is just you. I know a good specialist if you want.

ATM Machines

[ThrowAwaySociety]

Can anyone determine if these are Automated ATM Machines?

I'd better be careful entering my personal PIN number into these from now on.

Re:ATM Machines

[mutube]

Yes, they're Automated Automated Teller Machines. It's the extra level of automation that is really insecure.

I remember when things were only automated once. Simpler times.

(Your question was so daft I'm half waiting for a 'Whoosh!')

Re:ATM Machines

[spidrw]

I find it best to use part of my vehicle's VIN number when picking out my personal PIN number for use at the automated ATM machines. That way I can just read the reflection off my dash when punching the numbers into the LCD display.

Not Sarah, John This Time!

[Scholasticus]

John Connor did this way back in '91 ... which means the machines ... oh shit.

Pick one

[Anonymous Coward]

...just get a deal going with McAfee? Then there systems would be completely safe or always online!

Fixed that for you.

Re:My friend is a Linux hacker...

[Yvan256]

So the combination is... one, two, three, four, five? That's the stupidest combination I've ever heard in my life! The kind of thing an idiot would have on his luggage!

Re:Lawsuit?

[halcyon1234]

Financially bankrupting someone for pointing out security flaws might dissuade others from doing so in the future, for fear of the same consequences.

Not a chance. To get the cash to pay the fines, he'll just break into a bunch of ATMS.

"Here's your $100,00, in $20 and $50s."

I hope

[pjbgravely]

I hope they didn't use my hack where I type in 790 and get all the money I want.

Re:Lawsuit?

[Zenaku]

That's like saying that keeping your money in a big pile on your front lawn will protect you from safe-crackers.

XKCD already did that one...

[Joce640k]

http://xkcd.com/463/