> However, when reviewing the code behind the admin interface, we found that it contains a hash of a default factory setting administration key. We purchased mu

> However, when reviewing the code behind the admin interface, we found that it contains a hash of a default factory setting administration key. We purchased multiple used ATMs from different sources and our investigation revealed that each had the same default key configuration. A used device should contain no PII, or any other data of the previous owner. However, using default settings is a sane choice when preparing a device for second hand sale. Yes, even if these default settings are insecure; that is solely the responsibility of the new owner.