flat assembler
Message board for the users of flat assembler.

Index > Heap > Nice Hack - Dex4U - Someone you know??

Author
Thread Post new topic Reply to topic
HyperVista



Joined: 18 Apr 2005
Posts: 691
Location: Virginia, USA
HyperVista
Manchester UK man uses MP3 player to hack Bank ATM machine!

http://www.theregister.co.uk/2006/11/18/mp3_player_atm_hack/
Post 18 Nov 2006, 17:40
View user's profile Send private message Visit poster's website Reply with quote
Dex4u



Joined: 08 Feb 2005
Posts: 1601
Location: web
Dex4u
Laughing Laughing Laughing i am not surprised, as its common knowledge in the UK, that they run on win95, the ones in the wall anyway Shocked
http://hackervoice.co.uk/forums/index.php?showtopic=982

Maybe the portable ones, uses something eles, as win95 does not support USB Confused .
Post 18 Nov 2006, 18:47
View user's profile Send private message Reply with quote
tom tobias



Joined: 09 Sep 2003
Posts: 1320
Location: usa
tom tobias
Dex4u wrote:
as win95 does not support USB
http://support.microsoft.com/kb/253756
Post 18 Nov 2006, 18:57
View user's profile Send private message Reply with quote
Dex4u



Joined: 08 Feb 2005
Posts: 1601
Location: web
Dex4u
tom tobias wrote:
Dex4u wrote:
as win95 does not support USB
http://support.microsoft.com/kb/253756

But even in win98se, with USB support, you still need a driver to of been loaded.
Post 18 Nov 2006, 19:15
View user's profile Send private message Reply with quote
arafel



Joined: 29 Aug 2006
Posts: 131
Location: Jerusalem, Israel
arafel
since when police does a complete car search (how otherwise they would notice some small piece of plastic having different name than the one in his drivers license?) just because of a minor traffic offence? something smells funny in this story.
Post 18 Nov 2006, 19:52
View user's profile Send private message Reply with quote
tom tobias



Joined: 09 Sep 2003
Posts: 1320
Location: usa
tom tobias
Perhaps this is a simple example of misunderstanding:
Dex4u wrote:
...as win95 does not support USB
I replied with this article, and should have included the quote below, representing the title of this M$ article:
http://support.microsoft.com/kb/253756
Quote:
Availability of Universal Serial Bus Support in Windows 95

I was not referring to win98se, nor was the article describing win98se, since
Dex4u wrote:
...as it's common knowledge in the UK, that they [i.e. uk ATM machines] run on win95,...
Yes, I agree with Craig's point:
Dex4u wrote:
you still need a driver to have been loaded
Presumably Dex4u refers to the gangster's portable device rather than the bank's device, or perhaps, both devices???
The Register wrote:
(the gangster) plugged his MP3 player into the back of free standing cash machines and was able to use it to read data about customers' cards. That data could then be used to 'clone' cards and use them for bogus purchases.
It is unclear, perhaps deliberately so, from the article, just HOW the gangster connected to the ATM apparatus.
arafel wrote:
since when police does a complete car search... just because of a minor traffic offense
Dorothy speaking to Toto wrote:
I have a feeling we're not in Kansas anymore.

http://en.wikipedia.org/wiki/The_Wizard_of_Oz_(1939_film)
Post 18 Nov 2006, 22:43
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17450
Location: In your JS exploiting you and your system
revolution
tom tobias wrote:
It is unclear, perhaps deliberately so, from the article, just HOW the gangster connected to the ATM apparatus.
The article says he used tones to capture the data. To me that would mean he is recording the modem signals on the phone line. This is easy to do since the normal twisted pair phone line leaks a lot of signal that can be picked up either magnetically or capacitively, amplified and recorded.

Modem signalling is standardised and can be easily decoded and analysed offline.
Post 19 Nov 2006, 00:31
View user's profile Send private message Visit poster's website Reply with quote
LocoDelAssembly
Your code has a bug


Joined: 06 May 2005
Posts: 4633
Location: Argentina
LocoDelAssembly
So, the data flows with no encryption and every bit says "please, capture me"? What a primitive system then :S
Post 19 Nov 2006, 00:41
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17450
Location: In your JS exploiting you and your system
revolution
LocoDelAssembly wrote:
So, the data flows with no encryption ...
I expect there was encryption, but as is normal with these cases, he probably had inside help, so he knew the encryption keys beforehand.
Post 19 Nov 2006, 01:47
View user's profile Send private message Visit poster's website Reply with quote
Dex4u



Joined: 08 Feb 2005
Posts: 1601
Location: web
Dex4u
LocoDelAssembly wrote:
So, the data flows with no encryption and every bit says "please, capture me"? What a primitive system then :S

Some times they will use the highest encryption on one part, but then leave the other part wide open, take the new British passports
http://www.guardian.co.uk/idcards/story/0,,1950226,00.html
Post 19 Nov 2006, 01:48
View user's profile Send private message Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar. Also on YouTube, Twitter.

Website powered by rwasa.