Truth to Power

ATM vendors just a bit touchy when security is tested

ATM Vendor Halts Researcher’s Talk on Vulnerability

An ATM vendor has succeeded in getting a security talk pulled from the upcoming Black Hat conference after a researcher announced he would demonstrate a vulnerability in the system.

Barnaby Jack, a researcher with Juniper Networks, was to present a demonstration showing how he could “jackpot” a popular ATM brand by exploiting a vulnerability in its software.

But on Monday evening, his employer released a statement saying it was canceling the talk due to the vendor’s intervention.

“Juniper believes that Jack’s research is important to be presented in a public forum in order to advance the state of security,” the statement read. “However, the affected ATM vendor has expressed to us concern about publicly disclosing the research findings before its constituents were fully protected. Considering the scope and possible exposure of this issue on other vendors, Juniper decided to postpone Jack’s presentation until all affected vendors have sufficiently addressed the issues found in his research.”

In the description of his talk on the conference web site, Jack wrote that, “The most prevalent attacks on Automated Teller Machines typically involve the use of card skimmers, or the physical theft of the machines themselves. Rarely do we see any targeted attacks on the underlying software. This presentation will retrace the steps I took to interface with, analyze, and find a vulnerability in a line of popular new model ATM’s. The presentation will explore both local and remote attack vectors, and finish with a live demonstration of an attack on an unmodified, stock ATM.”</em>

Like we didn’t have enough to worry about…what are the ATM makers hiding?


Recently on Ink 19...

Dark Water (2002)

Dark Water (2002)

Screen Reviews

J-Horror classic Dark Water makes the skin crawl with an unease that lasts long after the film is over. Phil Bailey reviews the new Arrow Video release.

The Shootist

The Shootist

Screen Reviews

John Wayne’s final movie sees the cowboy actor go out on a high note, in The Shootist, one of his best performances.

HEALTH

HEALTH

Event Reviews

HEALTH continue their mission to make everyone love each other, bringing their RAT-BASED WARFARE TOUR to the Mile High City, where Steven Cruse gets to be a very lucky middle-aged industrial fanboy.