ATM machines

ImmortalOne

Hi,

Does anyone know much about the software run on say AIB & BOI atm machines? I know for BOI it's windows XP, because I've seen a few desktop screens once with an error message. All else I know is they use triple DES encryption when sending your transaction information. Anyone know anymore? This kind of info isn't publicly available so it's hard to get hold of it. You really have to go out of your way to find something good..

Regards.

liamo

I saw the ATM in Tallaght Hospital (I think it's AIB) booting into OS2 after gobbling someone's card and rebooting.

Edit: And I know of a number of other ATMs (but I'm not in a position to say whose) that have been installed recently that are still using Windows NT even though NT was End-Of-Life'd about 3 years ago.

AARRRGH

I read an article on slashdot a while back which showed if you search for ATM manuals on Google (search for the specific manufacturer) you'll find the default password for the ATM. A few people tried out their findings and it turns out the default password is still used on most ATM machines...

I think the only thing you can do is make the €20's come out as €50's, but it's still pretty shocking!

AARRRGH

Btw, I'd say they use public key cryptography rather than private key cryptography, as it would be a lot easier to manage all the keys, i.e. they only need to use the main servers public key rather than each ATM needing its own private key.

FruitLover

Automated teller machine machines? You sound like Kraftwerk.

I've seen a bunch of ATMs around Dublin rebooting to NT and 2K screens.

Martyr

i've seen some atms running NT 3.51

Black Swan

VB 2008 plus encryption programme?

crashedmind

In general an ATM consists of 2 blocks:

• An EPP (Encrypting PinPad)
• A PC

EPP does the PIN entry from the keypad and the PIN crypto.
PC does the GUI (which is why you see PC OS type messages on failure), printer, cash dispenser, soft keys.
Card reader may be driven by EPP or PC depending on model and configuration.

The main ATM manufacturers for Ireland are NCR and Wincor-Nixdorf.

Red Alert

AIB are still definitely using OS/2 Warp - i saw one booting only a few days ago.

BargainHunter

The bank doesnt select which OS to use on their ATMs. The vendor programmes the ATMs.

Nearly every ATM Ive ever seen in Ireland has an NCR logo, or a Nixdorf logo on it. They dont attempt to hide it. Its right there on the machine.