5 ms·
>"The Secret Service alert says ATMs still running on Windows XP are particularly vulnerable, and it urged ATM operators to update to a version of Windows 7 to
by glaberficken 9y ago
>"The Secret Service alert says ATMs still running on Windows XP are particularly vulnerable, and it urged ATM operators to update to a version of Windows 7 to defeat this specific type of attack."
I had no idea ATMs ran Windows!
- colejohnson66 9y agoTo be specific, it’s most likely Windows Embedded.
- skocznymroczny 9y agoIn Poland, few years back, I caught several ATMs rebooting to Windows NT 5.0.
- slipstream- 9y ago...win2000 pre-release? or did you mean NT 4?
- vultour 9y agoYou'd be surprised how many things are running Windows. I always wonder if the manufacturer just hires cheap contractors that haven't seen anything apart from Windows in their entire life, or if there is an actual reason it can't run on linux.
- Hendrikto 9y agoOpenBSD would be perfect for the job, wouldn‘t it?
- luma 9y agoAn OpenBSD machine still running unpatched from the XP era would be every bit as vulnerable.
- ams6110 9y agoYes and no. OpenBSD always had far fewer exploitable bugs than Windows, so it presents a smaller attack surface. And far fewer people bothered to develop exploits. Windows has always been the big juicy target, with exploits easily available. But on the other hand, it only takes one.
- ethbro 9y agoI'd challenge that. Given that there are serious security architecture differences between Windows XP and OpenBSD systems. For starters, Windows XP has always optimized for "plug random hardware in and it Just Works" while OpenBSD aims more at "what is the minimal number of services we can have running in the base image." Sure, OpenSSL vulnerabilities found in the intervening time will still affect both, but we're still talking orders of magnitude difference in RCE vulnerabilities.
- dboreham 9y agoOne reason would be that the vendors require support. Of course there are supported embedded versions of Linux that they could use..
- _Understated_ 9y ago
- isostatic 9y agoIt's not unknown to see windows crash screens on atms. I've never seen one like this though: https://www.betaarchive.com/imageupload/1182228936.or.19648.jpg https://www.betaarchive.com/imageupload/1182228936.or.19648....
- kalleboo 9y agoI've seen an ATM stuck on the Windows XP boot screen, and one frozen with a Windows 9x "out of virtual memory" dialog box.
- toomanybeersies 9y agoIf you really want a blast from the past, a lot of them (used to?) run OS/2.
- 0xcde4c3db 9y agoOS/2 derivatives are still being developed and marketed [1] [2]. [1] http://www.ecomstation.com/ http://www.ecomstation.com/ [2] https://www.arcanoae.com/arcaos/ https://www.arcanoae.com/arcaos/
- ethbro 9y agoIf you're targeting known hardware, and the OS provides all the functionality you need, there's no reason to overengineer things.
- heywire 9y agoThe same with most point-of-sale machines. I worked for a point-of-sale vendor for a while that had both Windows and Linux versions of our software. All but one retailer chose the Windows version because they felt it was much easier to manage 10,000 Windows machines than 10,000 Linux machines. BTW, that one retailer that used the Linux version? They replaced it with the Windows version on their next hardware refresh.
- ams6110 9y agoOS/2 was another common one, at least up until the current decade. Not sure there are many of those left at this point.