Googling for ATM Master Passwords

default DOLLAR writes to mention an eWeek article following up on the ATM reprogramming scam pulled in Virginia Beach last week. A security researcher in New York has used a YouTube video, a few Google searches, and other legal methods to discover the master passwords to thousands of ATMs across the country. From the article: "Dave Goldsmith, founder and president of penetration testing outfit Matasano Security, in New York, did not say how he obtained the operator manual--which contains master passwords and other sensitive security information about the cash-dispensing machines--but an eWEEK investigation shows that a simple Google query will return a 102-page PDF file that provides a road map to the hack."

Giddy-up!

[Logiksan]

*runs off to Google and YouTube as fast as his little fingers will take him*

Trivial search - and the password is....

[rblum]

12345

Oh wait. That's my ATM PIN.

Re:Trivial search - and the password is....

[1010110010]

1 2 3 4 5? That's the combination an idiot would have on his luggage!

Re:Trivial search - and the password is....

[JesseL]

That's the combination to my luggage!

Aha!

[The Grey Clone]

We've finally found that mysterious step 2!

We're rich!! We're rich!!!

[queenb**ch]

Phhhtttt!!!

That's to all of you who made fun of us geeks!

*Rude Hand Gesture*

That's for every bully who ever shoved someone into a locker during PE.

Due to our superior ability to manipulate poorly secured cash dispensing devices, we shall now rule the world!

First the treasury...then the military. World domination cannot be far behind.

2 cents,

QueenB

Nine Days....

[Mr.Scamp]

The machine gave $20's for $5's for NINE days after it was reprogrammed before someone commented on it. God Bless America.

Re:The default password is...

[jenkin sear]

I thought it was up, up, down, down, left, right, left, right, B, A, Start ...

Re:We're rich!! We're rich!!!

[lomedhi]

2 cents,

Please enter a multiple of $5 or $20.

Re:WOW

[davidmcn]

You know, I assumed that you were joking about the password, I was thinking there is no way the default password could be 0012345....then low and behold, right there in the doc, there it is....

Re:Casino

[thewils]

I'm sure big Tony will be along shortly to remove your kneecaps...

Re:Casino

[djdavetrouble]

The master code that would open the keyboxes and get you keys to anywhere in the casino was 654321. And people told each other all their passwords and such all the time.

And that is how it all happened. [imdb.com]

Re:Giddy-up!

[dan828]

Kids these days got it easy. In my day you had to spend hours digging though dumpsters, now you just click a couple of buttons. What is the world coming to?

Re:Responsability

[gorckat]

Don't you mean, "With great power comes great repostability"?

Ready-Set -Go

[Analogy Man]

However, should voting machines even come with a default password so that they can be hacked? Shouldn't reprogramming them require using some sort of physical/electronic key thats more difficult for people to get ahold of? If you can reprogram a voting machine by walking up to it and typing in any code, regardless of whether it's the default password or not, then the voting machine security is terrible. It's one thing to put a default password on a digital cable box for blocking channels, it's another matter entirely to put a default password on a voting machine.

Which one gets fixed first!

Bank Error in Your Favor!

[unsigned integer]

Collect $200. Pass Go!

Re:What software?

[Cctoide]

Yes, I'll get right to that right after we get you the software that will let you uplink to NORAD.

Re:Casino

[Some_Llama]

"But our government insists that organized crime doesn't exist, while at the same time having a division to track organized crime! I'm so confused!"

Well it is BECAUSE they have a division to track organized crime that it doesn't exist, just like how since there is a war on drugs, drug use is virtually non-existant anymore...

Remember when you could go to a concert and see people smoking pot? Or you could find it in high schools, or any night club? Now it's almost impossible to find and if you did (besides being a criminal) it would cost in the thousands of dollars for just a gram of the stuff.

Ah, the old days, the WOD eliminated that scourge once and for all... God bless America.

Re:No password needed..

[avenj]

That may work for the Irish, but what if you're Russian?

Re:Giddy-up!

[Marxist Hacker 42]

Are you from HP?

Re:Giddy-up!

[Takumi2501]

In the snow? Uphill both ways?

an opportunity like this...

[Anonymous Coward]

..."I find computers unlocked with badges in the computer and with the user no where around."...and you fail to set goatse as their default wallpaper, screensaver and window theme manager??

Re:The default password is...

[John Hasler]

> Whoever makes these ATMs deserves all the bad publicity that they get.

Might it be Diebold, by any chance?

Re:What software?

[freakmn]

I have the solution to the clogged tubes [tacobell.com]

Re:Casino

[Eivind Eklund]

Irony, n: Somewhat like iron. See Goldy, Silvery.