Register for an account

X

Enter your name and email address below.

Your email address is used to log in and will not be shared or sold. Read our privacy policy.

X

Website access code

Enter your access code into the form field below.

If you are a Zinio, Nook, Kindle, Apple, or Google Play subscriber, you can enter your website access code to gain subscriber access. Your website access code is located in the upper right corner of the Table of Contents page of your digital edition.

Technology

Today's Demonstration: How to Hack an ATM—With Video!

DiscoblogBy Allison BondJuly 31, 2010 12:56 AM
ATM-300x220.jpg

Newsletter

Sign up for our email newsletter for the latest science news

Although money may not grow on trees, it can spew from an ATM--at least if you're computer security expert Barnaby Jack. He demonstrated recently at a security conference in Las Vegas how to get an ATM to spit money for minutes on end. Jack purchased the ATMs online, and says the tools required to hack them cost less than $100, according to Technology Review:

"After studying four different companies' models, he said, "every ATM I've looked at, I've found a 'game over' vulnerability that allowed me to get cash from the machine." He's even identified an Internet-based attack that requires no physical access."

Of course, Jack didn't reveal how exactly he hacked the machines... but he came pretty close. In one demonstration Black explained:

"The device's main circuit, or motherboard, is protected only by a door with a lock that is relatively easy to open (Jack was able to buy a key online). He then used a USB port on the motherboard to upload his own software, which changed the device's display, played a tune, and made the machine spit out money [for several minutes]."

Some ATMs remain very vulnerable to remote attacks as well, Jack explained, such as those designed to accept software upgrades over the Internet. For example, a hacker can circumvent an ATM authentication system by installing his or her own software, which the hacker could then exploit using someone else's information or a fake card. Jack said he hoped the demonstration would spur manufacturers to make ATMs more secure. Maybe we're just cynical, but with every new lock or security measure, won't new hackers arise to bypass them? Check out Tech Review's video about Jack's demonstration. The best bit—hacked ATM plays silly music and spits out money—starts at 1:15: Related content: Discoblog: iCop: Police to Use Facial Recognition App to Nab Criminals Discoblog: Crime-Fighting Kitties: Cat Hair Could Be the Next Forensic Tool Discoblog: True Crime, Real-Time: Live Streaming Mugshots to Your iPhoneImage: flickr / thinkpanama

2 Free Articles Left

Want it all? Get unlimited access when you subscribe.

Subscribe

Already a subscriber? Register or Log In

Want unlimited access?

Subscribe today and save 70%

Subscribe

Already a subscriber? Register or Log In