I am a little torn. I do agree that thieves are cowardly shits that should catch a beating for taking something that does not belong to them. On the other hand, videos like this (and any publicity related to) should motivate corporations, either through a sense of responsibility (yeah...right..I won't hold my breath) or public outcry, to take appropriate steps to ensure that hacks like this cannot overcome their tech.
But.......since a majority of ATM machines are made by Diebold (disclaimer: I have no proof to back that up) who are a corporation that cares not even one little bit about anything other than profit (FACT!), I have doubts that anything will happen to circumvent/deny/overcome these card skimmer hacks.
@10pound: Most hackers purposefully disseminate or publish hacks for that exact reason. Whether it's in regard to exploitable weaknesses in email system, or how to easily bypass deadbolt locks, the goal is usually to inform people that they are not as safe or secure as they believe themselves to be. The hope is that if companies won't correct the problems, that at least the affected individuals will realize the problem and take additional steps to remedy the situation.
Granted, there will be those who take the information and use it against those who haven't yet been made aware of the problem. The lag time there is a major issue. But, you can't withhold all information from the majority for the sake of it being misused by the minority.
In regards to your statement about Diebold; their concern is profit, and their profit is based on the security of their products. Banks won't invest in Diebold products if they are proven to be easily circumvented or compromised. Greed, like paranoia, is a fantastic motivator for the development of higher security. The bigger issue is that this is less Diebold's problem, but that of the bank, institution, or individual who owns the ATM. The security of my house isn't Medeco's responsibility. Even if I trust their product, it's my responsiblity (beyond manufacturer gross negligence or fraud), ultimately, to ensure that the product works and that I maintain awareness of it, and my property. Laxity is the first chink in the armor.
@met2art has an invisible star: It's one thing to disseminate the information. It's quite another to cash in on it, like these assholes do by trying to sell card skimmers to fraudsters.
@HeartBurnKid: Agent of R.O.A.C.H.: I agree, and I wasn't defending their actions, but just speaking in response to what @10pound had mentioned. These guys are obviously douchebags, and will no doubt be caught before long.
They have more videos on their youtube channel of finished products, and people commenting saying things like "wow this is cool how do i buy?" No question anyone who purchases, installs and collects money from one of these things should be sent to jail.
I've been keeping a lookout for these things at ATM's since your original article was posted several months ago. I haven't seen one yet but the two ATM's I use most frequently are the one at my main bank branch and the one in the police department at school... fairly safe and not overly susceptible to this kind of hack.... i hope.
@jonhapimp: Dear Mr. Davidson: This is to inform you that we know you moved from your currently supplied location to a new address based on account activity. We will be dispatching someone to your new address to collect the penalties owed to us.
And this is why you have two checking accounts. One for storage and one that you only keep like $5 in. If you need cash or you're going to be handing the card over to someone who may take it out of your sight, you hop on mobile / online banking and transfer from the storage account to the minimal risk account then use the minimal risk account. Worst case scenario, you're out $5.
@Theophilus P. Wildebeeste: Um, that's how skimmers work, they read it as the card slides through, doesn't matter if the card stays in the machine during the transaction or not.
There are skimmers for slot/swipe style readers and skimmers that are small enough that a waiter could conceal in their palm and swipe your data in person, with you watching, and you wouldn't even realize it. Those "pocket" skimmers are by far the most common, you can pick 'em up on eBay.
I don't get cash out of the ATM for the reasons that others have said. However, I do deposit money using the ATM since it's often quicker than waiting in line for a real teller machine. This is kind of spooky. Just be aware of what's around you, I suppose.
@jdickson87: I'm always on the lookout for card skimmers and "unexpected" cameras.. but that ATM in the pic looks really real. Scary.
(I do get money from the ATM, but that's only because there are about 5 Chase branches within 2 miles of my house, and another 2 within .5 miles of my office. They're practically everywhere.. I'm waiting for them to open a branch in my shitter so I can take care of 2 transactions at once).
I always keep at least 40-100$ on me. I use debit and credit all the time but some places just don't accept them or it's way faster to pay with cash if you're going somewhere and they have old machines lineups etc. Plus restaurants you get your bill leave cash and walk out no going up to the front desk or waiting for servers to get back to you with the wireless debit. Not to mention the protection of not giving some stranger your card to swipe as they please. Oh and if you're with groups of people tossing your share in is far easier then trying to split a bill at the debit machine. Lots of bars now days don't let you pay with debit. They have those small cash machines that charge like $3 to take cash out. Annoying.
@Jarmel: All the best campus dealers have PayPal or some sort of prepaid debit card account, or both.
PayPal, or similar, really are the best way to do that kind of business if you're on a college campus or have any client base with ready access to the internet. Never have to worry about getting your cash jacked and a layer of deniability with simple poss Vs. sales in some states.
Could this possibly be part of the reason why many newer ATM's have card slots that are designed in a big translucent piece? If anything was crammed into it, it'd be easier to detect and would obstruct the view of the flashing lights inside, likely making it noticeably darker than the other slots. I could be wrong, but it seems to make some sense.
@kaubuchon: You would think they would give you a bit more. Maybe wave some fees for a year or something.
You just saved you a world of hurt, embarrassment, having to supply fraud protection for anyone that could have used the ATM, the trust of their customers, etc. And not even a calendar?
@CaptCaveman: Why do people believe they deserve a reward for simply doing what is right? Is it not enough to just DO WHAT IS RIGHT?
"The trust of their customers?" Anyone with a pulse knows these things can happen, and not every bad thing in life is preventable. I think my trust would have been broken if they DID give this guy a reward for just doing the right thing.
@theirishcreme: apply that same logic to the bank that overcharges you fees and se how that works out for you. Very few people ESPECIALLY corporations and banks do the RIGHT thng
That is mainly the reason why we WALK INTO the bank, ATM machines are loaded with bugs. I've had $40 stolen in a ATM machine, it told me "please take the cash" and nothing came out, ARGH!
@Fractal the Meek: Yeah, but if the existing card slot is in the frame of the security cam, it would be pathetically easy to just watch the tape and look for the user that's there when the skimmer "magically" appears...
Nothing...
Nothing...
Bingo!
If the existing card slot isn't in the frame then no "magical" skills would even be necessary...
@Sesheron: Some are pretty advanced and have mini cameras to take pictures of the pin as you type. Big problem here in london, you can buy your own for £2000 here [www.ukclassifieds.co.uk]
09/20/09
09/19/09
But.......since a majority of ATM machines are made by Diebold (disclaimer: I have no proof to back that up) who are a corporation that cares not even one little bit about anything other than profit (FACT!), I have doubts that anything will happen to circumvent/deny/overcome these card skimmer hacks.
my 2 cents.
09/19/09
Granted, there will be those who take the information and use it against those who haven't yet been made aware of the problem. The lag time there is a major issue. But, you can't withhold all information from the majority for the sake of it being misused by the minority.
In regards to your statement about Diebold; their concern is profit, and their profit is based on the security of their products. Banks won't invest in Diebold products if they are proven to be easily circumvented or compromised. Greed, like paranoia, is a fantastic motivator for the development of higher security. The bigger issue is that this is less Diebold's problem, but that of the bank, institution, or individual who owns the ATM. The security of my house isn't Medeco's responsibility. Even if I trust their product, it's my responsiblity (beyond manufacturer gross negligence or fraud), ultimately, to ensure that the product works and that I maintain awareness of it, and my property. Laxity is the first chink in the armor.
09/19/09
09/20/09
09/19/09
I've been keeping a lookout for these things at ATM's since your original article was posted several months ago. I haven't seen one yet but the two ATM's I use most frequently are the one at my main bank branch and the one in the police department at school... fairly safe and not overly susceptible to this kind of hack.... i hope.
05/12/09
I'm also paranoid enough to shield my typing fingers w my other hand - so what? My money's safe, at least!
05/12/09
05/12/09
05/12/09
05/12/09
05/13/09
@Hello Mister Walrus: I wouldnt tell you if they did ;)
04/08/09
04/07/09
There is no way that skimmers can work in those.
04/08/09
There are skimmers for slot/swipe style readers and skimmers that are small enough that a waiter could conceal in their palm and swipe your data in person, with you watching, and you wouldn't even realize it. Those "pocket" skimmers are by far the most common, you can pick 'em up on eBay.
04/07/09
04/07/09
(I do get money from the ATM, but that's only because there are about 5 Chase branches within 2 miles of my house, and another 2 within .5 miles of my office. They're practically everywhere.. I'm waiting for them to open a branch in my shitter so I can take care of 2 transactions at once).
04/07/09
04/07/09
I always keep at least 40-100$ on me. I use debit and credit all the time but some places just don't accept them or it's way faster to pay with cash if you're going somewhere and they have old machines lineups etc. Plus restaurants you get your bill leave cash and walk out no going up to the front desk or waiting for servers to get back to you with the wireless debit. Not to mention the protection of not giving some stranger your card to swipe as they please. Oh and if you're with groups of people tossing your share in is far easier then trying to split a bill at the debit machine. Lots of bars now days don't let you pay with debit. They have those small cash machines that charge like $3 to take cash out. Annoying.
04/07/09
04/07/09
PayPal, or similar, really are the best way to do that kind of business if you're on a college campus or have any client base with ready access to the internet. Never have to worry about getting your cash jacked and a layer of deniability with simple poss Vs. sales in some states.
04/07/09
04/07/09
04/07/09
You just saved you a world of hurt, embarrassment, having to supply fraud protection for anyone that could have used the ATM, the trust of their customers, etc. And not even a calendar?
Did the letter come postage due?
04/07/09
"The trust of their customers?" Anyone with a pulse knows these things can happen, and not every bad thing in life is preventable. I think my trust would have been broken if they DID give this guy a reward for just doing the right thing.
04/07/09
04/06/09
04/07/09
04/06/09
04/06/09
::insert movie quote:: "here's an idea, it's called a mask"
but in all honesty, walk in from side of the building, duck down, camera has limited field of view, slap it on, and walk away.
04/06/09
04/07/09
Nothing...
Nothing...
Bingo!
If the existing card slot isn't in the frame then no "magical" skills would even be necessary...
04/06/09
04/06/09
04/07/09
04/06/09
04/06/09