Slashdot Mirror
95% of ATMs Worldwide Are Still Using Windows XP
BUL2294 writes "95% of the world's ATM machines are still running Windows XP and banks are already purchasing extended support agreements from Microsoft. (some of the affected ATMs are running XP Embedded, which has a support lifecycle until January, 2016). 'Microsoft is selling custom tech support agreements that extend the life of Windows XP, although the cost can soar quickly—multiplying by a factor of five in the second year, says Korala. JPMorgan is buying a one-year extension and will start converting its machines to Windows 7 in July; about 3,000 of its 19,000 ATMs need enhancements before the process can begin...'"
https://xkcd.com/801/
The cost of the support agreements, would still be less than the replacement of several thousand ATMs and internal systems. There is a reason why people do this, and it's not just lazyniess..
If there is that big of a market why is nobody selling/buying a replacement OS already? Particularly one cheaper than windows.
I never understand why ATM's dont use HTML/SVG and then the OS is replaceable as a browser is the interface and a HTTP server security is well understood and network security would be part of a core competency
thoughts ?
john jones
Windows XP is the only operating system stable & secure enough to handle sensitive transactions such as cash dispensing.
My turnips listen for the soft cry of your love
Is a bad choice anyway. Not just a Microsoft bash, but aside from all the security issues, windows is XP is a desktop platform, not a OS to be putting on dedicated devices ( even the so-called embedded version really isn't any more appropriate for this, don't let the marketing folks fool you )
An ATM should be running off a custom embedded OS targeted for this purpose, not a commodity OS.
---- Booth was a patriot ----
"95% of the world's ATM machines are still running Windows XP
Yes, but what about the *automatic* ATM machines? Those are the ones I most am concerned about.
To hell with 7. Please put Windows 8 on the ATMs instead! I already love how ATMs do a wonderful job of selecting the wrong option for me after finally getting the card to take, only to then take me into the Spanish menu, spitting out a receipt, and then not accepting my card again while the line forms behind me! Metro can only enhance this lovely experience! Hell, add a kinect to it so when I flip it a golden salute it recognizes my input and doubles the ATM fee! Gotta keep up with the bank's great customer service these days!
'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
Is the dispensing software is written in Java? Half kidding, and wondering at the same time.
I see more ATMs running Windows 2000 than Windows 95.
I think Windows 98 and OS/2 still have a comparable market share, however.
As someone who has worked with Diebold, they have never have more than 3 programmers and they only use and have ever used Visual Basic. This is why their ATMs (and voting machines) are required to run Windows.
"When life gives you lemons, don't make lemonade. Make life take the lemons back!" -- Cave Johnson
Yeah, there must be, oh, thousands of ATMs out there.
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
Actually, that doesn't worry me nearly as much as Windows for Warships.
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
OS/2 was entrenched. The ADA a couple of years ago declared that all ATMs must have blind support. That meant adding sound. The OS/2 machines could in the main not support that service and as such were retired. It was a field day for NCR, Hyosung and Diebold with hundreds of thousands of new ATMs being purchased. These new ADA compliant ATMs were replaced mostly by Windows XP driven ATMs, with the promise that the ATMs could be upgraded to Windows 7 when it became necessary.
I have only been working with Diebold, but they are refusing to hire sufficient (or maybe any idk) additional hands to deal with the necessary surge in maintenance to upgrade to Windows 7.
All that being said, the XP ATMs are perfectly safe. They are behind some rather crazy firewalls. It would be rather difficult to get into them to take advantage of any potential problem. (The issue for the bank / ATM driver / card processor not being the loss of the cash, but rather the loss of the customer information.)
Hmmm. Better post this anonymously.
[O]verall, OS/2 failed to catch on in the mass market and is little used outside certain niches where IBM traditionally had a stronghold. For example, many bank installations, especially Automated Teller Machines, run OS/2 with a customized user interface.
http://en.wikipedia.org/wiki/OS/2
Doctors destroy health, lawyers destroy justice, universities destroy knowledge, religion destroys spirituality
Actually, that doesn't worry me nearly as much as Windows for Warships.
You jest but the US Navy was (is?) using Windows as the OS for drive-by-wire hovercrafts. One bluescreened and ran out of control in San Franscisco.
~Demonoid Penguin (moderating)
Yes, I am a Windows hating Linux user but the question is serious, not flame bait, why would they chose XP in the first place and why have they not moved to something else in the last decade?
With real cash at stake I would have probably started with a minimal BSD OS and just added the minimal graphics, comms and I/O libraries needed to support the main application. I'm sure others here have their own ideas of the best OS, most excluding Windows?
Ah, a good old Nelsoning is hard to top.
A feeling of having made the same mistake before: Deja Foobar
Most people who comment on Microsoft stories here are clueless about the company's product portfolio, customer base, policies, and competitive status. Not saying that you're one of them though >:)>
About two years ago I was a field tech and would get service calls to JPMS. Most of the time it was just to move fax machines around or to make a jack live. Sometimes it was to try to get a PC to boot. There is SO much legacy cruft in the boot image of a JPMS desktop that it can take three boots just to get the damn thing stable. Some of the boot code even flashes by "DOS TCP/IP 1.0" as it goes by. They have decades of cruft to dig through to get those things anywhere modern. I have pity for the admins trying to roll this out, I really do.
On the other hand that damn image is used by hotshot investment brokers to transact multi-million dollar trades everyday. That image is a lot of their "secret sauce" that they use to make a shit load of cash. It's a tool that has made them trillions. I can see why they don't want to fuck with it. They would gladly have me hang around for a day at a few hundred dollars an hour (not that I was seeing 20% of that) just to make sure the hotshot could do his job. The hotshot's downtime cost them thousands of dollars an hour. Imagine having to roll out an image to 1000 hotshot desktops and have it fail for even a day.
That's a lot of incentive to keep the boat from rocking, whatever the cost.
Remember that a lot of that legacy code is interfacing with mainframes that are running code before the advent of PCs.
-- I have a private email server in my basement.
All that being said, the XP ATMs are perfectly safe. They are behind some rather crazy firewalls.
Nope.
http://www.extremetech.com/extreme/173701-atms-running-windows-xp-robbed-with-infected-usb-sticks-yes-most-atms-still-run-windows
And another successful attack vector using Plotus http://www.atmmarketplace.com/article/221087/Mexican-ATMs-fall-prey-to-new-cyberattack
Successful malware attacks (both gaining access to the local cash and screen scraping and keystroke recording of customer information) through ATMs have been going on since 2008 and Diebold would most certainly be well aware of this, even if they are choosing not to bring it to your attention.
Comment removed based on user account deletion
Went to a hospital a week ago that was newly opened late last year. All workstations are the Lenovo all-in-ones with the Windows 8 sticker on it. Guess what operating system they are running on now .... Windows XP Professional (at least that's what the screen saver said.)
I saw an IV infusion pump being rebooted by a nurse. I hear the famous chine of Windows XP shutting down.
New Economic Perspectives
No, sound support is not reason enough. OS/2 ATMs in Spain have blind support, including sound.
Come on now. I don't need to read any Alex Gabbard derived propaganda (Oak Ridge administrator who wrote the "terrorists can build nukes out of fly ash" bullshit that kicked it all off) and neither do you. You can look at a reliable source of where coal came from to see how stupid the suggestion is. You can then look up the composition of the most radioactive coal on the planet and calculate how many hundreds of thousands of tonnes you would need to extract enough material to get the famous "banana dose". You can then consider the average, and see that it's actually less than average background radiation due to being made of mostly very old organic material with isotopes of half lives that mean very little remains after millions of years. The impurities after that are really just sand, so obviously you end up with something containing small amounts of sand so significantly less radioactive than sand.
The very funny thing is that you and I are far more radioactive than fly ash. You have either been conned or are lying to push an agenda and taking advantage of the younger readers here that cannot see your various piles of bullshit for what they are.
I don't see why we should let such misleading rubbish go unchallenged. It's supposed to be a technical discussion site after all. We are not supposed to mislead the kiddies for some sort of political end.
I work for one of the major ATM vendors in the world and replacing Windows with Linux has become one of the top priorities across the whole portfolio (which is now a lot of other things than just ATMs). The reason are obviously the costs associated with Windows licenses. And why are the ATMs and other hardware still running Windows? Old and *very* messy codebase that is hard to port to Linux. But it's getting there.