<story><title>Hacking an ATM</title><url>http://henryschwarz.blogspot.co.uk/2012/06/black-hatted.html</url></story><parent_chain></parent_chain><comment><author>tptacek</author><text>Some backstory that isn&apos;t in this article: Barnaby Jack (who goes all the way back to the original eEye research team in the last &apos;90s early &apos;00s) did this ATM research while working as a researcher for Juniper Networks. I believe the original vendor he targeted was Tranax; they make the crappy free-standing ATMs you see in bodegas†.&lt;p&gt;Jack notified the vendor and (obviously) got his talk accepted and announced at Black Hat. The vendor complained to Juniper, and Juniper had the talk pulled††. Jack left Juniper for IOActive and gave the talk the following year. Last time I checked, I believe he was at McAfee.&lt;p&gt;† &lt;i&gt;Funny thing about Tranax: they managed to let Google crawl their maintenance manual a couple years ago, and the manual had their default maintenance code in it; a huge number of ATMs were found to be running with that default password, which allowed people to re-denominate the bills in the machine.&lt;/i&gt;&lt;p&gt;†† &lt;i&gt;This was probably a reasonable call, because Juniper has billions of dollars to lose to a negligence suit brought by an ATM company.&lt;/i&gt;</text></comment>
<story><title>Hacking an ATM</title><url>http://henryschwarz.blogspot.co.uk/2012/06/black-hatted.html</url></story><parent_chain></parent_chain><comment><author>twelvechairs</author><text>Its not very nice that the author turns a &apos;security researcher&apos; (his words) who is effectively helping (if not actually doing) the authors job for him into a pantomime villain.&lt;p&gt;[edit: I do get that they became &apos;friends&apos;, which gives some levity to these descriptions, but it still strikes me as casting aspersions not just on the individual but more generally on the way he and others like choose to work]</text></comment>