3 ms·

I worked for Diebold on their ATM's for a while. I was surprised to learn that they run full Windows. In fact, one of the projects I was on had a requirement t

by skc 9y ago

I worked for Diebold on their ATM's for a while. I was surprised to learn that they run full Windows. In fact, one of the projects I was on had a requirement that we upgrade the OS from XP to Windows 7 for security reasons. Regardless though, you can make an ATM do whatever you want if you have enough time and access to it. One of our low level debugging tools allowed you to effectively control every aspect of the device, so it could spit out whatever denominations you liked without talking to the banks mainframe. We used to have fun printing out ATM receipts showing our fake balances of millions of dollars etc.

Someone1234 9y ago
A full version of Windows or Windows Embedded ("Windows IoT")?
- skc 9y ago
  Full version of Windows. And want to know something else? The UI layer was html + javascript and some funky css that ran on a custom modified version of ie6. Beneath that, to handle fetching of data, comms, navigation, window management and other business logic etc, we used good old .Net and C#. It was a bizarre setup from a dev perspective but once you got used to it you could crank out new features incredibly quickly as you had a heavily regimented workflow (Usability trumps _everything_ with these machines). If you open up an ATM you will find your standard run of the mill beige PC inside it and in fact in many of the older machines they _literally_ stuff an _entire_ PC case in there simply laid on it's side. There is also an extra monitor back there with a little keyboard attached. The only impressive aspect of ATM's is the engineering that goes into all of the supporting hardware and peripherals such as the stackers, the cash acceptors, the cheque validators, the printers, the recycling cash canisters, the electronic pin pads, the various fraud detection features etc. I found that stuff much more interesting than the dev work I did day to day.
Massacr3 9y ago
I read that the software for the diebold model being targeted is built by Kal. Is this true? http://www.kal.com/en/video/multi-vendor http://www.kal.com/en/video/multi-vendor This article states that other manufacturers using Kal's software can be targeted as well with some alteration to the code. How possible could that be? https://arstechnica.com/information-technology/2018/01/in-a-first-us-hit-by-jackpotting-attacks-that-empty-atms-in-minutes/ https://arstechnica.com/information-technology/2018/01/in-a-...

by skc 9y ago

Someone1234 9y ago

A full version of Windows or Windows Embedded ("Windows IoT")?

skc 9y ago
Full version of Windows. And want to know something else? The UI layer was html + javascript and some funky css that ran on a custom modified version of ie6. Beneath that, to handle fetching of data, comms, navigation, window management and other business logic etc, we used good old .Net and C#. It was a bizarre setup from a dev perspective but once you got used to it you could crank out new features incredibly quickly as you had a heavily regimented workflow (Usability trumps _everything_ with these machines). If you open up an ATM you will find your standard run of the mill beige PC inside it and in fact in many of the older machines they _literally_ stuff an _entire_ PC case in there simply laid on it's side. There is also an extra monitor back there with a little keyboard attached. The only impressive aspect of ATM's is the engineering that goes into all of the supporting hardware and peripherals such as the stackers, the cash acceptors, the cheque validators, the printers, the recycling cash canisters, the electronic pin pads, the various fraud detection features etc. I found that stuff much more interesting than the dev work I did day to day.

Massacr3 9y ago

I read that the software for the diebold model being targeted is built by Kal. Is this true? http://www.kal.com/en/video/multi-vendor http://www.kal.com/en/video/multi-vendor This article states that other manufacturers using Kal's software can be targeted as well with some alteration to the code. How possible could that be? https://arstechnica.com/information-technology/2018/01/in-a-first-us-hit-by-jackpotting-attacks-that-empty-atms-in-minutes/ https://arstechnica.com/information-technology/2018/01/in-a-...