Why ATM Bombs May Be Coming Soon To the United States
HughPickens.com writes Nick Summers has an interesting article at Bloomberg about the epidemic of 90 ATM bombings that has hit Britain since 2013. ATM machines are vulnerable because the strongbox inside an ATM has two essential holes: a small slot in front that spits out bills to customers and a big door in back through which employees load reams of cash in large cassettes. "Criminals have learned to see this simple enclosure as a physics problem," writes Summers. "Gas is pumped in, and when it's detonated, the weakest part—the large hinged door—is forced open. After an ATM blast, thieves force their way into the bank itself, where the now gaping rear of the cash machine is either exposed in the lobby or inside a trivially secured room. Set off with skill, the shock wave leaves the money neatly stacked, sometimes with a whiff of the distinctive acetylene odor of garlic." The rise in gas attacks has created a market opportunity for the companies that construct ATM components. Several manufacturers now make various anti-gas-attack modules: Some absorb shock waves, some detect gas and render it harmless, and some emit sound, fog, or dye to discourage thieves in the act.
As far as anyone knows, there has never been a gas attack on an American ATM. The leading theory points to the country's primitive ATM cards. Along with Mongolia, Papua New Guinea, and not many other countries, the U.S. doesn't require its plastic to contain an encryption chip, so stealing cards remains an effective, nonviolent way to get at the cash in an ATM. Encryption chip requirements are coming to the U.S. later this year, though. And given the gas raid's many advantages, it may be only a matter of time until the back of an American ATM comes rocketing off.
As far as anyone knows, there has never been a gas attack on an American ATM. The leading theory points to the country's primitive ATM cards. Along with Mongolia, Papua New Guinea, and not many other countries, the U.S. doesn't require its plastic to contain an encryption chip, so stealing cards remains an effective, nonviolent way to get at the cash in an ATM. Encryption chip requirements are coming to the U.S. later this year, though. And given the gas raid's many advantages, it may be only a matter of time until the back of an American ATM comes rocketing off.
How about you don't seal the back of the ATM but instead put vents on it and a blower continuously pushing fresh air in? If they thieves try to pump it full of explosive gas, it would blow back out.
The mythbusters need to test this now!
Jamie Wants a Big Boom.
Along with Mongolia, Papua New Guinea, and not many other countries, the U.S. doesn't require its plastic to contain an encryption chip, so stealing cards remains an effective, nonviolent way to get at the cash in an ATM.
"Can I make a suggestion that doesn't involve violence, or is this the wrong crowd for that?"
Faster! Faster! Faster would be better!
Here in Brazil, more than a few thousand ATMs were exploded in the last years. Using ordinary explosives, and in many cases, demolishing the entire building in the process.
Many times, it destroys the money completely in the process, but as it seems, usually enough remains that the practice continues. No need to be refined, using gas or thinking about the physics. The thieves sometimes hijack trucks and buses to close off the streets for a few minutes while others set up and detonate the ATMs. The police rarely has time to come to the scene and jail them. Also, sometimes, the police itself is involved.
The most effective measure taken to discourage the practice was to pack bags of dyes inside the ATM cassetes, so that the money is stained and rendered unusable. If you try to deposit stained money, it'll be confiscated on the spot.
In the last months, security measures got better in the larger cities, and the thieves moved to exploding the ATMs in smaller cities, or more remote locations in the suburbs.
(beyond the halls of this honorable posting forum), you can bet your bottom someone will be doing it by the end of the week.
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
99% of the ATM's around here dont stand alone. they are in a small concrete building that has air vents. the other 1% are the little fake ATM's at liquor stores and shady party stores that nobody sane would insert their card into.
so no, I wont be seeing it around here.
Do not look at laser with remaining good eye.
Or they do what they do annoyingly in Japan/Mongolia (some places in China)and some places in Hong Kong and Taiwan. That is they put the ATM machines inside a small lobby of a bank and when the bank closes the shutters come down on the ATM lobby as well.
There are a load of solutions that will work with new ATMs, a number of them already mentioned. What is needed is a cheap retro-fit, without modifying the strong box. Many banks don't upgrade this expensive component for years. I think the most promising ideas are ones that ink the money - but they have to get well in to the whole stack. A thin red edge that could be trimmed won't be good enough.
I used to fix these types of machines. In training we were shown examples of the lengths that people go to to get inside these machines. The most successful that we saw was a group of thieves in South America who used explosives to blow open the safe.
It worked - but they blew up all the money too.
Political correctness is really just herd psychology pushed by insecure people who desperately seek social conformity.
What do encryption chips have to do with anything? If a card is stolen and known stolen, the owner can report the theft and the card is deactivated, whether or not it contains an "encryption chip". If the card is stolen and the owner does not know it was stolen, and the thief also has the pin, then they can use the card, whether or not it has an "encryption chip". Or am I totally understanding what this "encryption chip" does?
Better known as 318230.
*Automatic* ATM Machines.
I've seen recently in the news in the US where thieves will steal a truck, crash it backwards into an ATM, the thieves jump out, load the ATM into the back of the stolen truck, then they drive away. The entire process takes less than a minute. The stolen truck and the ATM minus cash will usually be found abandoned a few miles away.
Uh, when you have a card, you are limited to a few hundred dollars for a withdrawal.
Blowing up the ATM gets you all the cash in there. AND it removes the evidence of the criminals identity - you blow up the security camera. Whereas, when you use a stolen card, you are being videoed by the system - sure, you could wear a mask, but it's gonna look really weird to anyone passing by and will call the cops.
Who needs Mythbusters.
http://www.liverpoolecho.co.uk/news/liverpool-news/watch-fazakerley-man-andrew-white-8539648
US card can be more or less copied at will and have no security whatsoever. In which case you can copy the card, leaving the user thinking he still has it and will not report it stolen, and using pads, or social engineering or plain peeking, get the pin. results : since there is no encryption chip and the card can be copied, the ONLY security is the pin. With encrypted chip the additional security is the encrypted chip is far harder to copy.
Just a guess.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
Whoosh
90 ATMs is ONE gang, going around breaking into ATMs, so you just need to catch that gang.
All they need is a chimney and a blower.
Whoosh.
Read the second sentence of the summary. You will see the words "ATM machines" in there. The GP is just making fun of that.
Criminals gaining entry to an ATM after blasting a huge hole in it? Not really the kind of thing the everyday guy has to worry about.
I mean, you've got to linger by an ATM for a while, cause a huge blast, then get round the back, gather the exploded money, etc. If you're prepared to do that, you'll find any number of ways of going that far anyway.
And in the UK, ATM's are everywhere - in shops, post offices, out in the street, etc. You can't protect them all. There are no really "secure" ATMs here - not in location or design.
You just make it so that they have to do all this to hopefully draw attention. But you can't protect against every attack.
What? He isn't referring to Automated Asynchronous Transfer Mode Machines?
Chelloveck
I give up on debugging. From now on, SIGSEGV is a feature.
I'm in the UK, if there had been even one ATM blown up it'd be all over the news.
Absolutely. Fucking. NOTHING.
Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
Mostly they are coming soon thanks to Bloomberg helpfully posting an illustrated set of instructions on how to do this...
Woosh.
Here's a case that almost resulted in a Darwin award:
http://consumerist.com/2014/12...
Why not just supply the guts of the ATM with a nitrogen blanket? Seems like that would keep the acetylene from exploding inside the ATM.
I would have thought that drilling some holes into the back, top or underside of the ATM would fix the problem. The ATM might need some steel plates on the inside of the holes to stop people poking wires through into the machine itself but it shouldn't be rocket science to solve. The underside would be better on the basis that these ATMs are likely to be heavy and fixed to the floor with bolts so the underside would be less accessible.
I have even better deterrence. Instead of packing if with dyes pack it with dynamite. You know, to make big enough explosion to kill the robbers on the spot. Let this practice be known.
I saw this australian video a few weeks ago and while it is pretty funny that the guy loses his shoes, I didn't understand how he came up with this scheme in the first place. Now it makes sense.
FYI, here's the news story with a photo of the damage.
Seems Jamie and Adam got there way ahead of all of us (New myth to test):
http://youtu.be/dxgPX5-cmvc?t=...
If you allow for the fact that in their case the had to burn a small hole in the top which set fire to the contents first before filling the enclosure with water, which in the case of an ATM you don't have to, than its a reasonable idea.
Wow, that makes it sound like the card-thieves are nice folks — see, they are "nonviolent". Almost like the "unarmed" we read so much about recently.
What a way to turn a phrase and alter connotations — pick a nice-sounding synonym of many. Khmm, "quiet"? Neah... "Stealthy"? No... "Nonviolent" — yeah, that's it!!
In Soviet Washington the swamp drains you.
I knew lower gasoline prices would cause some kind of trouble. Who knew it would make it cheap enough to use to blow up ATMs?
How do I will I blow up an ATM machine? Brilliant, the skills people trapped in their mums basement learn here.
Chip and pin has been broken in Europe since soon after it was introduced: see https://www.lightbluetouchpape...
The US is looking at chip-and-signature, which is safer for the customer , who go screwed by UK banks claiming that chip and pin was perfect, therefor any losses were the customer's fault.
Courtesy of Ross Anderson, one of the serious researchers in the sucurity world.
davecb@spamcop.net
This is all too complicated. Here in Slovakia you just take a powerful enough car, a strong steel cable, and do this: http://tv.sme.sk/v/14692/pacha... (commentary is in Slovak, but the main thing: it was a Porsche Cayenne and the ATM held 130.000 EUR at the time). The same group did this several times, earning the nickname "the ATM mafia". Meanwhile, they have been caught, held for some months and then released because a judge "missed" a deadline for shuffling papers to a higher court (sitting in the same building).
So in the countries that have solved the gas attack problem do they see more people held up and forced to give up their ATM cards?
Turns out the only dumb one is you. And humorless too. I bet people love being around you.
You're only supposed to blow the bloody doors off
Have gnu, will travel.
I'm confused. I just read an article where someone was held up at knife-point (armed robbery). The suspect asked for the victim's wallet that contained cash, driver's license, social security card and credit cards. Who keeps their social security card in their wallet or purse?
Just turn atm's into money printers. That's how they get their money anyways. Then all the banks need worry about is ink and paper.
Damn I'm smart
Having a small slit (for money to come out) is precisely how they are getting broken into. If I can slide a thin piece of steel inside, I can open it. One method I use to open safes is to drill two holes, each 3/16th of an inch. One hole is for my pinhole camera so I can see inside. The other hole is to insert long, thin tools which I use to partially disassemble the mechanism from within.
Comment removed based on user account deletion
You don't need a bomb if you've got a proper pickup truck. http://www.dallasnews.com/news...
Just close the airgap. Split the atm into 3 distinct containers with separate air sections. The electronics and wires can move between the walls. The card tray and mechanism can be separated with an air vent back into the lobby. The dispenser tray can vent to the lobby and have money dropped into it and out of it in an air tight seal.
Problem solved. It's probably possible to retro fit to existing enclosures with a bit I'd thought work.
Would be a spark plug inside the ATM that triggers every ~5 seconds. Then the gas will explode in the attackers' faces, before there is enough of it to cause the safe door to blow open,
"the U.S. doesn't require its plastic to contain an encryption chip, so stealing cards remains an effective, nonviolent way to get at the cash in an ATM. "
In other words encryption leads to violence!
... Just include a secondary explosive, rather than ink capsules for the requisite earth-shattering kaboom ...
Because they're desperately hoping to avoid the inflation that will start as soon as people notice how drastically they've devalued the currency, and changing the money would be too big of a clue.
You have a point there. On the other hand, generally one of the best deterrents to crime is a loud alarm siren. Crooks don't like to attract attention. If your solution to making it "more secure" means they can get in silently, rather than having to set off an explosion, many bad guys will very much appreciate your improvement.
Behind broadband and bank robberies - time to catch up?
Using explosives in the US (though this seems to be more about gas vapors than actual explosives) would likely result in the full weight of US law enforcement hunting you down and pumping you full of bullets (see Boston bombings for more details).
Explosives are used quite often in Europe in crimes, but it's quite rare in the US.
...that run Windows instead of Linux. So they won't have to resort to explosives for a while.