This seems pretty obvious. I can't imagine folks whose job it is to build these machines to not have hopped onto this idea. This raises the question what's the downside of these?
Hacker serving 5-year sentence invents ATM add-on to prevent theft
31–40 of 53 posts
Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#32Earlier quoted context omitted.
Current skimmers need a horizontal swipe to read. This device requires the user to insert the card in the wrong orientation for the skimmer. The device holds onto the magnetic strip end of the card while it rotates, so it's not possible to skim after the device has performed the rotation. It's not clear how difficult or easy it is to make a skimmer that reads a card that is swiped vertically, though.
But, think about if a criminal duplicates the design and screws it to the front of existing / old machines? Most users will think that it's not a skimmer but the "secure" device. Also: Place the skimmer to the LEFT most portion of the horizontal hole. The card is the rotated and pushed past the skimmer as it's inserted into the machine :)
The non-magnetic part of the card is pushed past the skimmer...
Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#33Nice innovation. Being a convicted hacker myself and serving time in a federal camp, I give him credit for wanting to make amends, that is definitely an awesome motivation...not buying the part about being happy about being caught (forced intervention), since I know from experience and people I've met. I understand being liberated, starting your consequence (the nickel sentence), and feeling hope of change when your…
Thanks for the post, I was wondering how someone else having been through similar circumstances would have felt about someone being 'happy' to be caught. All said, it probably gets him a similar recognition from ATM mfg'rs & business people as an advanced degree, no? Couldn't a certain type of mind see an arrest like this as a badge of honor or starting sales platform to build a career in security? That's an honest q…
An employer may be hesitant to hire a criminal simply for the liability they presume over their employee. I can get a job fairly easy in coding since I have no restrictions on computer usage and some employers are amazed by my crime (google my name Michael Largent), but I'm a little different than maybe this individual (I get anxiety attacks sometimes).
As for me and employment, I've been through interviews some employers in the field will offer me a position, but coding is more of a hobby to me than a profession. I run my own business, because my conviction affects my self-esteem though...so I can't speak for others. I'm an awesome coder, but am afraid of rejection, so sometimes I won't apply for a job or I'll pass on a job offer.
Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#34Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#35Earlier quoted context omitted.
Thanks for the post, I was wondering how someone else having been through similar circumstances would have felt about someone being 'happy' to be caught. All said, it probably gets him a similar recognition from ATM mfg'rs & business people as an advanced degree, no? Couldn't a certain type of mind see an arrest like this as a badge of honor or starting sales platform to build a career in security? That's an honest q…
The conviction can get notoriety in the security field, but as any criminal, black hat hacker, or just coder will tell you....it's ALL trial and error. Where a conviction may benefit someone is if they are doing their own business...as far as employment. An employer may be hesitant to hire a criminal simply for the liability they presume over their employee. I can get a job fairly easy in coding since I have no restr…
Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#36I don't know much about the mechanical implications of this, but why not move the sensor instead of the card? Put the card in longways first, halfway in. Motorized sensor moves across card to scan it. There wouldn't be enough room left over for a skimmer that would still allow the ATM to read it and even if there was a skimmer, it makes the skimmer that much more expensive, since it would have to have a motor too. I…
Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#37Why are ATMs not 100% flat with 3 holes - for a keypad, note delivery and a hole for the bank card to go in. A skimming device can then not be added without making it very obvious the ATM has been altered. An ATM could also have a video camera installed that monitors the area where the card is entered - if something changes the ATM does not work and a warning message is displayed.
That wouldn't stop somebody from adding a flat facade over the whole ATM.
Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#38Earlier quoted context omitted.
The conviction can get notoriety in the security field, but as any criminal, black hat hacker, or just coder will tell you....it's ALL trial and error. Where a conviction may benefit someone is if they are doing their own business...as far as employment. An employer may be hesitant to hire a criminal simply for the liability they presume over their employee. I can get a job fairly easy in coding since I have no restr…
I was intrigued by your background. Since you invited us to Google your name, I hope you don't mind my posting this here: http://www.wired.com/threatlevel/2008/05/man-allegedly-b/
To get back on topic a little bit. I understand how he could want to make amends for what he's done, I do coding, algorithms, and websites usually for free and help others with any questions they may have that I have an answer for, but the PR being portrayed here is that he is "happy," to be caught.
The quoting words just sounds like he's trying to capitalize on a conviction (example: who did the video rendering? and I've seen this done ALOT inside)...not that there's anything wrong with using your circumstances to your advantage, but just careful with the wording.
Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#39You only insert half of the card into the chip reader slot and, for what I remember or could imagine, let the ATM exercise some challenge-response protocol with the on-card chip so that there's no way to and there would be no point in actually trying to copy the chip because all you see from the chip is an interface to it.
I haven't had the magnetic stripe on any of my cards swiped for at least a couple of years. Last time I did was probably because of dirt or grease on the chip's contacts prevented reading it. The magnetic stripes still exist for now but everywhere I go there are chip readers, from pizza restaurants to little shoppes.
Re: Hacker serving 5-year sentence invents ATM add-on to prevent theft
#40It's a nice idea (inserting the card widthways), but it's completely over-engineered. It's never going to be used as a retro-fit - it looks too much like a skimmer. In fact, if they became commonplace, it would make fitting skimmers that look like this device so much easier than trying to hide a skimmer in a discrete housing. Instead, allowing the card to be inserted widthways, and pulling it into the ATM as normal,…
On the other hand, because of the moving parts involved it is probably going to be much more expensive. And with the current chips on the card already, I don't think the banks are going to invest in those things as it simply will not provide them with enough ROI.