They aren't secure, at all. For example, most NCR ATMs can be physically opened with one of three keys that are easily available online. Many (especially at n

They aren't secure, at all. For example, most NCR ATMs can be physically opened with one of three keys that are easily available online. Many (especially at non-national banks) are running XP and only sporadically patched, if at all. Most NCR machines have a default admin password (one for Aptra Edge and one for Aptra Advance). Once you are in you can do whatever you want, from changing the XML for the greeting screens ("FEED ME A STRAY CAT") to replacing the animations and movies with whatever you like. The parameters controlling what is locally allowable on the machine can be changed by editing the right config file - is $500 going to be the maximum allowable withdrawal or $50,000? If you know your way around the actual machine configuration and the operator panel you can do fun things like tell the machine it is full of $1 dollar bills when it's actually full of $20s - you just have to know what the opacity value is for the bill scanner. The only factor here is physical security to the electronic components, which is exceedingly poor. The interior safes are very strong even once you've opened the external cabinet, so you won't be physically taking the money out very easily. Except for Triton machines, those things are ridiculously flimsy.