2 ms·
This article [1] argues that RAM scrapers are only able to work because the point-of-sale systems are running Windows XP. Newer versions of Windows make this e
by panarky 12y ago
This article [1] argues that RAM scrapers are only able to work because the point-of-sale systems are running Windows XP.
Newer versions of Windows make this exploit far more difficult [2].
[1] http://www.dailytech.com/Appalling+Negligence+DecadeOld+Windows+XPe+Holes+Led+to+Home+Depot+Hack/article36517.htm http://www.dailytech.com/Appalling+Negligence+DecadeOld+Wind...
[2] http://en.wikipedia.org/wiki/Address_space_layout_randomization http://en.wikipedia.org/wiki/Address_space_layout_randomizat...
- doug11235 12y agoI wouldn't call a RAM scraper an exploit. ASLR isn't an effective protection against a program that reads from memory. Driver signing in newer versions of Windows is a more appropriate protection but will still fall short of stopping a motivated attacker.
- Sami_Lehtinen 12y agoMost of POS terminals aren't using Windows, but embedded custom operating system, firmware & software. https://news.ycombinator.com/item?id=8409305 https://news.ycombinator.com/item?id=8409305