3 ms·

Wow… and I had felt nervous about the computers in my house and business still running Windows 10 (which will be EOL in 3 years, not a lot of time for a busines

Wow… and I had felt nervous about the computers in my house and business still running Windows 10 (which will be EOL in 3 years, not a lot of time for a business). But McDonalds has no problem with Vista (EOL 5 years ago). Ouch. If McDonalds ever gets hacked, this should come up for possible criminal liability.

prvit 4y ago
> If McDonalds ever gets hacked, this should come up for possible criminal liability. Oh no, the criminals might find out about your disgusting eating habits! The horror! Seriously though, what kind of damages might you as a customer expect to see from McDonalds kiosks getting hacked?
- deleted 4y ago
  [deleted]
- egypturnash 4y ago
  The same damages you might expect from sticking your credit card into a hacked ATM. There are some comments here claiming that their experience with McDonald’s order kiosks in the US makes them feel this is unlikely to be hackable, but “employees regularly leave them unlocked” sure sounds like an invitation for someone to find other hacks.
  - prvit 4y ago
    So… nothing? At least a physically tampered-with ATM could capture the magnetic stripe on my card. But what could a hacked ATM do with my not-American card which I insert in the chip slot?
    - seoaeu 4y ago
      Deduct a bunch of money from your account but not dispense it?
      - prvit 4y ago
        But… why?
  - mh- 4y ago
    e.g. none? at least in the US. when the credit card issuer fraudulent credits the charges back to your account, you no longer have any (meaningful) damages.
deleted 4y ago
[deleted]
checker 4y ago
He posted a correction (at the bottom) that they are running Windows 7, so it's a marginally better situation.
LandoCalrissian 4y ago
I caught one of the self checkouts rebooting at my local grocery store and it was still running Windows XP.
- Jaruzel 4y ago
  Nothing wrong with that, IF it's on an isolated WAN, and not connected to the internet. A fully patched copy of XP, with all the group/local policies set to lock it down, is very secure. In a lot of cases, it may look like XP, but it's actually XP Embedded, which has a lot of stuff stripped out, which reduces the attack surface significantly. It costs money to upgrade the checkout application for a new OS, and put it through rigorous testing - These things need to work almost 24/7 without crashing or needing admin intervention. It's the old idiom: If it ain't broke, don't fix it.
userbinator 4y ago
I have no problem with XP either. The "EOL" carping is mostly from the corporate interests; and as the other comments here explain, the actual secret part of the card processing happens on a complete separate machine which is definitely far more secured.

prvit 4y ago

> If McDonalds ever gets hacked, this should come up for possible criminal liability. Oh no, the criminals might find out about your disgusting eating habits! The horror! Seriously though, what kind of damages might you as a customer expect to see from McDonalds kiosks getting hacked?

deleted 4y ago
[deleted]
egypturnash 4y ago
The same damages you might expect from sticking your credit card into a hacked ATM. There are some comments here claiming that their experience with McDonald’s order kiosks in the US makes them feel this is unlikely to be hackable, but “employees regularly leave them unlocked” sure sounds like an invitation for someone to find other hacks.
- prvit 4y ago
  So… nothing? At least a physically tampered-with ATM could capture the magnetic stripe on my card. But what could a hacked ATM do with my not-American card which I insert in the chip slot?
  - seoaeu 4y ago
    Deduct a bunch of money from your account but not dispense it?
    - prvit 4y ago
      But… why?
- mh- 4y ago
  e.g. none? at least in the US. when the credit card issuer fraudulent credits the charges back to your account, you no longer have any (meaningful) damages.

deleted 4y ago

[deleted]

checker 4y ago

He posted a correction (at the bottom) that they are running Windows 7, so it's a marginally better situation.

LandoCalrissian 4y ago

I caught one of the self checkouts rebooting at my local grocery store and it was still running Windows XP.

Jaruzel 4y ago
Nothing wrong with that, IF it's on an isolated WAN, and not connected to the internet. A fully patched copy of XP, with all the group/local policies set to lock it down, is very secure. In a lot of cases, it may look like XP, but it's actually XP Embedded, which has a lot of stuff stripped out, which reduces the attack surface significantly. It costs money to upgrade the checkout application for a new OS, and put it through rigorous testing - These things need to work almost 24/7 without crashing or needing admin intervention. It's the old idiom: If it ain't broke, don't fix it.

userbinator 4y ago

I have no problem with XP either. The "EOL" carping is mostly from the corporate interests; and as the other comments here explain, the actual secret part of the card processing happens on a complete separate machine which is definitely far more secured.