Full Disclosure mailing list archives

Re: [Full-disclosure] Bank of the West security contact?


From: Stefan Weimar <stefan () meinhop3 de>
Date: Wed, 2 Apr 2014 22:01:10 +0200

Hi,

Am 02. April schrieb raccoon:

This goes for all banks and is probably one of the reasons most ATMs
still run windows and are skimmable time after time by the simplest
exploits. 

That's not quite right. The manufacturer of the ATM chooses the OS. 

When you -- as a bank -- buy an ATM you get a preinstalled device with
an underlying OS (Windows mostly) and a software stack consisting of
drivers for the card reader, dispenser, keyboard an so on. On top of
that you install your own application so the ATM will work with the
software running in your datacenter.

Yours sincerely
Stefan
-- 
make -it ./work

GnuPG-Key: 742ADF27 <stefan () meinhop3 de>
Fingerprint: 037F 17FC CF4B C1E0 598D  97B1 C2CE 7963 742A DF27

Attachment: signature.asc
Description: Digital signature


_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Current thread: