From: "Tumbleweed" 
Newsgroups: uk.finance
Subject: Re: Man used MP3 player to hack ATMs
Date: Sun, 19 Nov 2006 17:00:45 -0000


"mrcheerful ."  wrote in message 
news:nsV7h.2908$k74.1652@text.news.blueyonder.co.uk...
>
> "Tumbleweed"  wrote in message 
> news:4s9rdmFu32smU1@mid.individual.net...
>>
>> "Richard Oliver"  wrote in message 
>> news:4s8fd5FuadbfU1@mid.individual.net...
>>> Haven't seen it posted here before.
>>>
>>> http://www.theregister.co.uk/2006/11/18/mp3_player_atm_hack/
>>>
>>> "Parsons plugged his MP3 player into the back of free standing cash 
>>> machines and was able to use it to read data about customers' cards. 
>>> That data could then be used to 'clone' cards and use them for bogus 
>>> purchases."
>>>
>> The astonishing thing AIUI is that the data was not encrypted at all when 
>> it was sent from the cash machine down the telephone line.It was just a 
>> series of DTMF tones which could easily be converted back to the numbers 
>> representing card nos, pins etc.
>>
>
> So anyone could pick it up at any convenient point in the bt system, such 
> as a joint box or culvert in the pavement?  If so then there must be gangs 
> all over the country getting ex BT vans and jackets at this very moment.

much easier to grab it at the point of origination, but essentially yes. 
There was a watchdog I think about 'phantom' premium rate phone calls made 
from peoples phones where it seemed almost certain they were made from 
junction boxes.

-- 
Tumbleweed

email replies not necessary but to contact use;
tumbleweednews at hotmail dot com