A Week After Feds Approve Movie Derivatives Market, Congress Bans It

Once Again, Bank ATMs Are Not Very Secure

from the well,-duh dept

Fri, Jun 25th 2010 3:31pm — Mike Masnick

A few years ago, we discussed how bank ATM's just aren't very secure, despite the belief by many that they were. That discussion revolved around the fact that many people often compare bank ATMs to e-voting (in part because Diebold was a big player in both businesses). It looks like more and more folks are realizing the same thing. Some security researchers are about to release their evidence on just how easy it is to hack bank ATMs. And, of course, if security researchers are talking about it now, you can be pretty sure that hackers already figured this out a while ago.

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: atm, security

13 Comments

If you liked this post, you may also be interested in...

Reader Comments

Subscribe: RSS

View by: Time | Thread

Anonymous Coward, 25 Jun 2010 @ 3:37pm

"Some security researchers are about to release their evidence on just how easy it is to hack bank ATMs."

Faster than a broadband download. More powerful than a mainframe. Able to breach corporate firewalls in a single click. It's a proxy. It's a botnet. It's SUPERHACKER.
[ link to this | view in chronology ]
- Anonymous Coward, 25 Jun 2010 @ 3:39pm
  
  Re:
  "And, of course, if security researchers are talking about it now, you can be pretty sure that hackers already figured this out a while ago."
  
  Of course, SuperHacker has hacked everything.
  [ link to this | view in chronology ]
  - Anonymous Coward, 25 Jun 2010 @ 3:41pm
    
    Re: Re:
    Even TAM's mom?
    [ link to this | view in chronology ]
    - Anonymous Coward, 25 Jun 2010 @ 3:57pm
      
      Re: Re: Re:
      ESPECIALLY TAM's mom!
      [ link to this | view in chronology ]
      - ChurchHatesTucker (profile), 25 Jun 2010 @ 4:43pm
        
        Re: Re: Re: Re:
        It's hardly hacking if the access point is wide open.
        [ link to this | view in chronology ]
      - Hephaestus (profile), 25 Jun 2010 @ 11:14pm
        
        Re: Re: Re: Re:
        "Of course, SuperHacker has hacked everything."
        
        "ESPECIALLY TAM's mom!"
        
        I was wondering were he acually came from ...
        [ link to this | view in chronology ]
        
        Anonymous Coward, 26 Jun 2010 @ 9:30am
        
        Re: Re: Re: Re: Re:
        You give TAM way too much credit if you think he is related to SuperHacker.
        [ link to this | view in chronology ]
lavi d (profile), 25 Jun 2010 @ 3:59pm

Old News
Anyone who ever watched "Terminator II" knows how easy it is to hack an ATM.

Sheesh.
[ link to this | view in chronology ]
Anonymous Coward, 25 Jun 2010 @ 4:27pm

blah blah blah mindless scare mongering about tech...

you know banks are not very secure either, anyone can walk in with a gun and rob the place, rednecks with chains have pulled ATM's out of walls and driven off with them...

whats the difference
[ link to this | view in chronology ]
- DocMenach (profile), 25 Jun 2010 @ 4:42pm
  
  Re:
  Well, if you had an ounce of reading comprehension you might have noticed that he framed the whole thing in the context of the fact that many people compare electronic voting systems with ATMs under the idea that ATMs are the pinnacle of security.
  [ link to this | view in chronology ]
- lfroen (profile), 26 Jun 2010 @ 11:44pm
  
  Re:
  Absolutely. Scare mongering in its best: linked article provide no, not even one (sic!) technical details on so-called "hacking". Or maybe did those "researchers" just used chainsaw to cut the thing?
  People don't rob banks every day (or steal other things) not because banks (or other people houses) are so secure. People don't rob/steal/murder because it's wrong. "Thou shell not steal", remember?
  And even technically, ATM are match more secure than e-voting machines, because banks have all incentives and resources in the world to make them so. Hardly situation with voting machines.
  [ link to this | view in chronology ]
Anonymous Coward, 25 Jun 2010 @ 4:56pm

"One potential route of attack is via communications ports that are sometimes accessible from outside an ATM, Moss said."

This is brain-dead simple and has existed since the dawn of computing. If someone has physical access, they have your data. The only way around this is heavy encryption that exists on and from point to point, transport, and survives regular audits, and hopefully changing 2-factor authentication methods.

I can guarantee you fewer than 5% of bank ATM's are getting monthly audits for security eavesdropping/vulnerabilities.

I never use a public ATM, (or any computer terminal beyond public browsing sites.) It costs less than $5 for hardware PS/2 USB keylogging on any library terminal, for example.
[ link to this | view in chronology ]
Hugh Guiney (profile), 25 Jun 2010 @ 8:24pm

"And, of course, if security researchers are talking about it now, you can be pretty sure that hackers already figured this out a while ago."

Security researchers and hackers are the same people. :P
[ link to this | view in chronology ]