ATM hack gives cash on demand
Found on PC World on Wednesday, 28 July 2010
Exploiting bugs in two different ATM machines, the researcher from IOActive was able to get them to spit out money on demand and record sensitive data from the cards of people who used them.
After experimenting with his own machines, Jack developed a way of bypassing the remote authentication system and installing a homemade rootkit, named Scrooge, that lets him override the machine's firmware.
The machines Jack hacked were, however, based on Microsoft's Windows CE operating system.
Closed source is more secure they say.