<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" 
      xmlns:thr="http://purl.org/syndication/thread/1.0">
  <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html" />
  <link rel="self" type="application/atom+xml" href="http://consumerist.com/atom.xml" />
  <id>tag:consumerist.com,2010:/1/tag:64.14.177.195,2009://1.5329309-</id>
  <updated>2010-01-24T11:36:58Z</updated>
  <title>Comments for Hackers Discover Data-Stealing ATM At Convention</title>
  <subtitle>Shoppers bite back.</subtitle>
  <generator uri="http://www.sixapart.com/movabletype/">Movable Type 4.32-en</generator>
  <entry>
    <id>tag:64.14.177.195,2009://1.5329309</id>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html" />
    <link rel="service.edit" type="application/atom+xml" href="http://consumerist.com/cgi-bin/mt/mt-atom.cgi/weblog/blog_id=1/entry_id=5329309" title="Hackers Discover Data-Stealing ATM At Convention" />
    <published>2009-08-04T20:48:02Z</published>
    <updated>2009-08-05T01:59:41Z</updated>
    <title>Hackers Discover Data-Stealing ATM At Convention</title>
    <summary>--&gt;Nobody knows yet whether it was planted by an attendee, or if the ATM had been there for some period of time before the event, but hackers at last week&apos;s DefCon conference in Las Vegas discovered a rogue unit that was designed to capture customers&apos; credit card data with each use.</summary>
    <author>
      <name>Chris Walters</name>
      
    </author>
    
    <category term="Government and Legal" />
    
    <content type="html" xml:lang="en" xml:base="http://consumerist.com/">
      <![CDATA[<p><!--<img src="http://consumerist.com/images/31/2009/08/080409-003-las-vegas-atm-at-hacker-convention.jpg" width="158" height="158" class="left" alt="data-stealing atm from DefCon convention, July 2009" />-->Nobody knows yet whether it was planted by an attendee, or if the ATM had been there for some period of time before the event, but hackers at last week's DefCon conference in <a class="autolink" title="Click here to read more posts tagged LAS VEGAS" title="Click here to read more posts tagged LAS VEGAS" href="http://consumerist.com/tag/las-vegas/">Las Vegas</a> discovered a rogue unit that was <a href="http://www.wired.com/threatlevel/2009/08/malicious-atm-catches-hackers/">designed to capture customers' credit card data with each use</a>.</p>
]]>
      <![CDATA[<p>PCMag says it was <a href="http://www.pcworld.com/article/169469/fake_atm_doesnt_last_long_at_hacker_meet.html?tk=rss_news">placed by criminals pre-conference</a>, but Wired's Threat Level blog says, "It's not known how long the ATM was in the hotel or whether it was placed there by a DefCon attendee to catch his fellow hackers or simply by an outside criminal group trying to target conference attendees."</p>
<p>An attendee grew suspicious of the tinted plastic front and shone a light through it, where he saw a PC instead of the expected security camera. Speaking of which, Wired says the ATM was placed in apparently the one location in the Riviera Hotel where there <i>isn't</i> a security camera&mdash;"right outside the hotel's security office."</p>
<p><a href="http://www.wired.com/threatlevel/2009/08/malicious-atm-catches-hackers/">"Malicious ATM Catches Hackers"</a> [Threat Level]<br />
<a href="http://www.pcworld.com/article/169469/fake_atm_doesnt_last_long_at_hacker_meet.html?tk=rss_news">"Fake ATM Doesn't Last Long at Hacker Meet"</a> [PCWorld via <a href="http://www.observer.com/2009/media/did-you-digg-it-4">The Observer</a>]</p>
]]>
    </content>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14678931</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14678931" />
    <title>Comment from eXo on 2009-08-10</title>
    <author>
        <name>eXo</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>@<a href="#c14586673" rel="nofollow">temporaryerror</a>: I wondered if it dispensed money as well.</p>
<p>Point is, this is a casino.  Casinos have highly trained security personal.  They are supposed to be aware of all the potential scams.  Someone placing a large ATM sized machine right next to their office is a bit ridiculous.</p>]]>
    </content>
    <published>2009-08-10T18:14:29Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14593820</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14593820" />
    <title>Comment from Englishee Teacher on 2009-08-05</title>
    <author>
        <name>Englishee Teacher</name>
        <uri>http://</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://">
        <![CDATA[<p>@<a href="#c14583113" rel="nofollow">eXo</a>: Well, seeing as they probably don't make the decisions surrounding ATM placement, the security officers probably had no reason to question it.</p>]]>
    </content>
    <published>2009-08-05T11:15:46Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14587794</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14587794" />
    <title>Comment from Kllian on 2009-08-04</title>
    <author>
        <name>Kllian</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>How is this different from any other ATM?  $3 fee for this $4 fee for that.</p>]]>
    </content>
    <published>2009-08-05T03:36:26Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14587470</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14587470" />
    <title>Comment from Michael Belisle on 2009-08-04</title>
    <author>
        <name>Michael Belisle</name>
        <uri>http://www.smift.com/</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.smift.com/">
        <![CDATA[<p>@<a href="#c14583113" rel="nofollow">eXo</a>: Perhaps security discovered it? I mean, since they interviewed the head of security about it and all.</p>]]>
    </content>
    <published>2009-08-05T03:19:35Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14586673</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14586673" />
    <title>Comment from temporaryerror on 2009-08-04</title>
    <author>
        <name>temporaryerror</name>
        <uri>http://</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://">
        <![CDATA[<p>@<a href="#c14583113" rel="nofollow">eXo</a>: <br />
Yeah, I wondered about that myself... And did they ATM actually dispense money?</p>]]>
    </content>
    <published>2009-08-05T02:39:25Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14586611</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14586611" />
    <title>Comment from xtc46 - thinksmarter on twitter on 2009-08-04</title>
    <author>
        <name>xtc46 - thinksmarter on twitter</name>
        <uri>http://think-smarter.blogspot.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://think-smarter.blogspot.com">
        <![CDATA[<p><p>@<a href="#c14583113" rel="nofollow">eXo</a>: Most people are comlacint when it comes to stuff like that, also most "security" personnel are lazy and wouldnt notice, although Id expect more out of a casino.</p></p>]]>
    </content>
    <published>2009-08-05T02:36:57Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14586589</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14586589" />
    <title>Comment from xtc46 - thinksmarter on twitter on 2009-08-04</title>
    <author>
        <name>xtc46 - thinksmarter on twitter</name>
        <uri>http://think-smarter.blogspot.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://think-smarter.blogspot.com">
        <![CDATA[<p><p>I dont think it was somone at the confrence, as one of the cards used on the machines has been charged fraudulently, and now the secret service is investigating. Had it just been a test, no data would have been used maliciously.</p><br />
<p>That said, it just goes to show that even a group who are focused very much on security can and do get tricked.</p></p>]]>
    </content>
    <published>2009-08-05T02:36:01Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14586567</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14586567" />
    <title>Comment from FooSchnickens - Full of SCAR on 2009-08-04</title>
    <author>
        <name>FooSchnickens - Full of SCAR</name>
        <uri>http://www.f00tography.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.f00tography.com">
        <![CDATA[<p>@<a href="#c14583113" rel="nofollow">eXo</a>: You know what happens when you assume, people who should be doing their job don't do it.</p>
<p>No wait, that's not it...</p>]]>
    </content>
    <published>2009-08-05T02:35:13Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14583113</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14583113" />
    <title>Comment from eXo on 2009-08-04</title>
    <author>
        <name>eXo</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>so... there may not be cameras on the security office... but I am assuming that security type people might possibly inhabit this office from time to time.  And one might guess that these security inhabitants might notice a random ATM appearing one day just outside of their office?</p>
]]>
    </content>
    <published>2009-08-05T00:26:15Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14582867</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14582867" />
    <title>Comment from jvanbrecht on 2009-08-04</title>
    <author>
        <name>jvanbrecht</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>@<a href="#c14582853" rel="nofollow">jvanbrecht</a>: crap...<br />
s/new/knew</p>]]>
    </content>
    <published>2009-08-05T00:17:10Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14582853</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14582853" />
    <title>Comment from jvanbrecht on 2009-08-04</title>
    <author>
        <name>jvanbrecht</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>No, of all places to put a fake anything, Defcon is the last place to do it, its 100% illegal, and %100 guaranteed to be found in short order, which it was.</p>
<p>Whomever put it there either did it because they new a conference was about to occur, just not what kind of conference, or it was just total dumb luck on the timing, but I seriously doubt it was anyone attending the conference.</p>
<p>That said.. it was a freaking blast</p>]]>
    </content>
    <published>2009-08-05T00:16:41Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14582756</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14582756" />
    <title>Comment from SacraBos on 2009-08-04</title>
    <author>
        <name>SacraBos</name>
        <uri>http://www.sacrabos.com</uri>
    </author>
    <content type="html" xml:lang="en" xml:base="http://www.sacrabos.com">
        <![CDATA[<p>I'd love to go to a DefCon.  It's possible this was done by group of attendees, since they do occasionally (okay, frequently) try to hack and social engineer each other.  However, it should be assumed that it was a criminal act, but if it turns out it was a test (and no data breach occured), I think it would make a great paper or presentation at the event.</p>]]>
    </content>
    <published>2009-08-05T00:13:13Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14582030</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14582030" />
    <title>Comment from PLATTWORX on 2009-08-04</title>
    <author>
        <name>PLATTWORX</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p><p>The Rivera? I see this meeting was quite upscale. ;-)</p></p>]]>
    </content>
    <published>2009-08-04T23:49:16Z</published>
  </entry>

  <entry>
    <id>tag:64.14.177.195,2009://1.5329309-comment:14581860</id>
    <thr:in-reply-to ref="tag:64.14.177.195,2009://1.5329309" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html"/>
    <link rel="alternate" type="text/html" href="http://consumerist.com/2009/08/hackers-discover-data-stealing-atm-at-convention.html#c14581860" />
    <title>Comment from Charles Duffy on 2009-08-04</title>
    <author>
        <name>Charles Duffy</name>
        <uri></uri>
    </author>
    <content type="html" xml:lang="en" xml:base="">
        <![CDATA[<p>My, but those two stories differ in their spin.</p>]]>
    </content>
    <published>2009-08-04T23:43:36Z</published>
  </entry>


</feed>



