3 ms·

Seriously? This is happening now?! ATMs are supposed to be secure, then why the hell are they running one of the most security loop-hole OSes even now? That to

Seriously? This is happening now?! ATMs are supposed to be secure, then why the hell are they running one of the most security loop-hole OSes even now? That too Windows XP, which has been deemed as the most unsecure OS in the world!. It's long time for them to switch to Linux!

masklinn 13y ago
> ATMs are supposed to be secure, then why the hell are they running one of the most security loop-hole OSes even now? ATMs are not internet-connected and have very restricted inputs, so that's mostly irrelevant[-1]. ATMs use windows because support, licensing[0], institutional knowledge, existing codebases, hardware drivers availability and the like. Due to [0], as other commenters I'd see them migrating to some BSD rather than Linux, much like Sony did. If they ever switch off of Windows XP in the first place. [-1] only mostly, if you can cut through and get hardware access, you can have fun: http://www.extremetech.com/extreme/173701-atms-running-windows-xp-robbed-with-infected-usb-sticks-yes-most-atms-still-run-windows http://www.extremetech.com/extreme/173701-atms-running-windo... then again it seems the vulnerability used here is "boot from USB key" which is orthogonal to the OS used [0] and no possible copyleft headaches
kyberias 13y ago
Are you seriously suggesting that Windows as an operating system has some serious holes that has made it insecure as an ATM OS? Care to elaborate which those holes have been and how have they been exploited in the ATMs?
- tsahyt 13y ago
  I came across this yesterday. Not necessarily just exploiting a Windows security hole though. http://media.ccc.de/browse/congress/2013/30C3_-_5476_-_en_-_saal_2_-_201312271600_-_electronic_bank_robberies_-_tw_-_sb.html http://media.ccc.de/browse/congress/2013/30C3_-_5476_-_en_-_...

3 ms·

Seriously? This is happening now?! ATMs are supposed to be secure, then why the hell are they running one of the most security loop-hole OSes even now? That to

by geekxworld 13y ago

masklinn 13y ago
> ATMs are supposed to be secure, then why the hell are they running one of the most security loop-hole OSes even now? ATMs are not internet-connected and have very restricted inputs, so that's mostly irrelevant[-1]. ATMs use windows because support, licensing[0], institutional knowledge, existing codebases, hardware drivers availability and the like. Due to [0], as other commenters I'd see them migrating to some BSD rather than Linux, much like Sony did. If they ever switch off of Windows XP in the first place. [-1] only mostly, if you can cut through and get hardware access, you can have fun: http://www.extremetech.com/extreme/173701-atms-running-windows-xp-robbed-with-infected-usb-sticks-yes-most-atms-still-run-windows http://www.extremetech.com/extreme/173701-atms-running-windo... then again it seems the vulnerability used here is "boot from USB key" which is orthogonal to the OS used [0] and no possible copyleft headaches
kyberias 13y ago
Are you seriously suggesting that Windows as an operating system has some serious holes that has made it insecure as an ATM OS? Care to elaborate which those holes have been and how have they been exploited in the ATMs?
- tsahyt 13y ago
  I came across this yesterday. Not necessarily just exploiting a Windows security hole though. http://media.ccc.de/browse/congress/2013/30C3_-_5476_-_en_-_saal_2_-_201312271600_-_electronic_bank_robberies_-_tw_-_sb.html http://media.ccc.de/browse/congress/2013/30C3_-_5476_-_en_-_...