Beta

Slashdot: News for Nerds

×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Visual Autopsy Of An ATM Card Skimmer

timothy posted more than 10 years ago | from the picture-taker-worth-a-thousand-bucks dept.

Security 880

Bert64 writes "A chap at work was recently the victim of an ATM card skimmer which took his card details, cloned them and allowed the fraudster to take 550 pounds out of his account. Having tried to explain how the fraudsters can hide a camera and card reader around the ATM, he decided it would be easier to show one of them after a few drinks down the pub. He was a little surprised to find that the machine he chose had a card reader and camera in place. These were removed and analysed, we believe we have reclaimed about 800 pounds worth of kit. Result: Pictures."

cancel ×

880 comments

Pour me up a FROST PISS! (-1, Troll)

Anonymous Coward | more than 10 years ago | (#8369345)

Hey ma, I really want an ATM Card Skimmer to deliver me a frosty piss!

Re:Pour me up a FROST PISS! (-1, Troll)

Anonymous Coward | more than 10 years ago | (#8369357)

Shut up, dumbass.

haha i got first post (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369346)

FOR TEH GNAA!! WTFOMG HY LFAO HY HAHAOHOHOA ROLLOFFLE

-dikky

to keep posts on topic.
Try to reply to other people's comments instead of starting new threads.
Read other people's messages before posting your own to avoid simply duplicating what has already been said.
Use a clear subject that describes what your message is about.
Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments

YOU FAIL IT!!!1 (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369387)

Yet again, the GNAA is proven to be a stupid fucking waste of space. Give up the game, coz yo ass is gonna lose anyway - mutherfucker

dikky, you fucking fail it (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369400)

You are bringing shame to the GNAA.

550 Pounds of money?!?!?!? (3, Funny)

Anonymous Coward | more than 10 years ago | (#8369347)

Holy cow! That's a lotta dollars! Hope he hurt his back carting it all away. ;)

Re:550 Pounds of money?!?!?!? (4, Funny)

Quasar1999 (520073) | more than 10 years ago | (#8369418)

How much is that in kilos?

Re:550 Pounds of money?!?!?!? (-1, Offtopic)

Qinopio (602437) | more than 10 years ago | (#8369488)

249.475804 kilograms. What I want to know is, if the British are supposed to use their fancy metric system, why do they use standard units for their money?

Conversion into European mainland's monetary unit (2, Informative)

tepples (727027) | more than 10 years ago | (#8369492)

calculator say: [x-rates.com] 550 GBP = 1027 USD = 817 EUR

Re:550 Pounds of money?!?!?!? (4, Funny)

DeionXxX (261398) | more than 10 years ago | (#8369496)

About 250 Kilograms [google.com] ... man I love google...

Re:550 Pounds of money?!?!?!? (4, Funny)

kramer2718 (598033) | more than 10 years ago | (#8369567)

Holy cow! That's a lotta dollars! Hope he hurt his back carting it all away. ;)

Sadly, with the current exchange rate 550 GBP is almost 550 lbs. of USD.

You wouldn't happen to be a pom wouldya? (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369352)

"Chap" "Pound" I think you're a ... a... A POM!

Arghh (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369355)

hahahaha This stuff is just crazy. Slashdotted before FP

FP (-1, Flamebait)

Anonymous Coward | more than 10 years ago | (#8369361)

I did it you faggots!!!

Re:FP (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369501)

u-yay ailit-fay

OUCH (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369364)

OUCH! THAT SUCKS!

Mirror in case of /. (4, Informative)

mixy1plik (113553) | more than 10 years ago | (#8369367)

This is a bit creepy. I always wonder when I hit those run-down ATMs in the corner of convenience stores if I might have my card nabbed.
I've stopped using some of the sketchier ATMs because of this.


MIRROR HERE IN CASE OF A /.'ING [sr20.net]

Here is what I do (5, Insightful)

savagedome (742194) | more than 10 years ago | (#8369466)

Two things that I always ask my friends to do too.

1. If you can, go to a supermarket or any store nearby that gives you cashback on your debit card. I can buy a pack of gum instead of paying stupid ATM fee AND get cashback with NO risk.

2. Use your credit card to withdraw cash (but make sure that you pay it in the next billing cycle as cash withdrawls have very high APR) as the liability on credit cards is very low.

Re:Here is what I do (4, Informative)

Abcd1234 (188840) | more than 10 years ago | (#8369520)

Actually, correct me if I'm wrong, but with credit cards, my understanding is that you get nailed for interest the *second* you pull the cash out, unlike purchases, where the interest is calculated at the end of the month.

Re:Here is what I do (1)

Unoti (731964) | more than 10 years ago | (#8369542)

In the cards I'm familiar with you are charged a one-time percentage rate for the cash taken out, plus a higher interest rate for the cash as well.

Re:Here is what I do (0)

Anonymous Coward | more than 10 years ago | (#8369596)

Probably depends on the card. I got one that allows me 3 weeks to pay for cash withdrawl without *any* charge.

Re:Mirror in case of /. (0)

Anonymous Coward | more than 10 years ago | (#8369467)

and the SR20 nuts come to the rescue. No DETs though. I'm dissapointed.

Re:Mirror in case of /. (0, Offtopic)

mixy1plik (113553) | more than 10 years ago | (#8369499)

I got yelled at and had to pull the plug. Sorry about that. :(

Re:Mirror in case of /. (0)

Anonymous Coward | more than 10 years ago | (#8369550)

Nice karma whore. Hey everyone, here's an image mirror! Oh, sorry, had to take it down.

Mirror needs a mirror too. (0, Troll)

Anonymous Coward | more than 10 years ago | (#8369509)

It just got Slashfucked too.

I have never used a "sketchy" ATM (1)

NotQuiteReal (608241) | more than 10 years ago | (#8369584)

And I have never paid an ATM fee...

Planing is a virtue, and costs less.

FIrst Post Troll (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369368)

I think I made first post! I am so happy. LInux rules. Go SHS!

Not a single comment yet... (-1, Redundant)

cdrudge (68377) | more than 10 years ago | (#8369369)

...and the site is already /. Way to go guys.

Result? (-1, Offtopic)

Chordonblue (585047) | more than 10 years ago | (#8369373)

A.S.S.

Another Server Slashdotted

Easy as Ebay (5, Interesting)

Xeed (308294) | more than 10 years ago | (#8369375)

This is a growing trend. Along with other questionably legal items, you can find a card reader from Ebay [ebay.com] for a fraction of what you can scam.

What ever happened to "Stick 'em up??"

Questionably Legal?? (5, Insightful)

PedanticSpellingTrol (746300) | more than 10 years ago | (#8369449)

There are plenty of legitimate uses for magnetic stripe readers. Why, here at the University of South Carolina we just installed 3 $1,200 newspaper machines to limit the free newspaper program to students and faculty. I suppose you also think taxing blank CD-R and giving the proceeds to record companies is a good idea, because nobody would ever want to, say, back up data with them.

Re:Easy as Ebay (2, Funny)

mattjb0010 (724744) | more than 10 years ago | (#8369470)

What ever happened to "Stick 'em up"?

s/up/in/

Re:Easy as Ebay (4, Insightful)

petard (117521) | more than 10 years ago | (#8369477)

That's not questionably legal in any way; that's for a cash register. Many registers nowadays are just PCs and use one of those (generally affixed to the keyboard) to process credit card transactions. In fact, the legality of all of the items involved in the fraud is unquestionable. Turning them into the fraudulent device and attaching them to the ATM, however, is just as unquestionably illegal. (FYI, in case you're unconvinced about the Ebay auction, you can walk into any office depot and buy the gadget you linked [officedepot.com] .)

Re:Easy as Ebay (1)

GnrcMan (53534) | more than 10 years ago | (#8369486)

Well, to be fair, card readers like the one you link to on ebay are perfectly legal and have many legitimate uses. That particular card reader isn't even the right shape to use for ATM card skimming.

I suppose you could take it apart and build your own ATM shaped card reader from the parts, but then again, it doesn't have any sort of memory to save the card numbers without being plugged in to a computer.

Actually, you could probably just make one out of an old tape recorder. Unfortunately, it's not brain surgery.

Questionably Legal??? (5, Interesting)

brunes69 (86786) | more than 10 years ago | (#8369502)

There are a myrid of legal uses for stripe readers, including computer and home security, and making really cool copies of your bank cards*

I have a friend who has a reader who does this.. he takes a plastic generic card with a cool photo on it, with a blank stripe, and copies your ATM stripe onto it. Fully functional, totally customized ATM card.

You should see the looks he gets using his "superman" debit card.

Re:Easy as Ebay (5, Insightful)

confuse(issue) (750477) | more than 10 years ago | (#8369532)

This is a growing trend. Along with other questionably legal items, you can find a card reader from Ebay for a fraction of what you can scam.

What a good post 9-11 American citizen. You are right in calling it 'questionably' legal, unfortunately (for you) the answer to the question is yes it is legal. The government does not need to put Laws on everything that can do bad things, the laws should instead target bad things. DVD recorders should not be illegal...selling (or even just giving) a burned DVD of Star Wars should be illegal. Having a magnetic card reader is a great exercise in driver writing and or learning about it for POS apps (not piece of s&^t apps).

Makes you wonder (3, Interesting)

haRDon (712926) | more than 10 years ago | (#8369376)

Just how many ATMs have this equipment in place?

Bit of a worry really..

And just what recourse do victims have? Is there any way to get your money back, or is it gone forever?

Re:Makes you wonder (1)

ChrisMG999 (308536) | more than 10 years ago | (#8369410)

Many banks, at least here in the States have some sort of protection against this where the cardholder is not held liable for the funds.

Re:Makes you wonder (4, Informative)

mattjb0010 (724744) | more than 10 years ago | (#8369422)

Is there any way to get your money back, or is it gone forever?

In the terms of my credit/debit card it says if I notify the bank within a reasonable time period of unauthorized transactions I get the money back. I suspect most banks have a similar deal.

Re:Makes you wonder (1)

haRDon (712926) | more than 10 years ago | (#8369494)

I know here in Australia there are terms for credit cards that offer protection like you mention, however I don't know if that extends to regular cards or not.

Maybe this is another good reason to back up my decision to pay for everything using my credit card, and only use cash when credit card facilities are unavailable, which is getting rarer nowadays.

Re:Makes you wonder (5, Informative)

big_groo (237634) | more than 10 years ago | (#8369454)

This happened to my friends - luckily they were both out of town at the time, and *used* each of their bank cards. The bank gave them an automatic, free overdraft for the amount taken, but it took them about a week to get the money back. (TD Canada Trust, in case you were wondering)

Banks are insured, y'know...but I have to wonder, if they weren't out of town (and able to prove it) would they have been so forthcoming?

Slashdotted! (-1, Offtopic)

ansonyumo (210802) | more than 10 years ago | (#8369380)

Slashdotted already. This has to be a record.

Re:Slashdotted! (1)

Phil Karn (14620) | more than 10 years ago | (#8369426)

I had no trouble getting it, because I surf through a Squid proxy cache that peers with other caches, and apparently those other caches already had copies of the objects I wanted.

Squid is a Good Thing. Use it.

It is /.ed (-1, Redundant)

slightly_kooky (442635) | more than 10 years ago | (#8369381)

The link is already dead. Anybody have a mirror?

uhm (0)

Anonymous Coward | more than 10 years ago | (#8369388)

ain't you supposed to tell the pigs if you find shit like that? not that they'll do anything about it, but still...

huh? (0, Troll)

mindstormpt (728974) | more than 10 years ago | (#8369389)

nice job indeed...

N KASE OV SHLASHDOTTERING (-1)

Anonymous Coward | more than 10 years ago | (#8369390)

<HTML>
<HEAD>
<TITLE></TITLE>
</HEAD>
<BODY>
<br>
Found in an active state attached to an ATM in London...

<DIV ALIGN="center">
<TABLE WIDTH="800">
<TR>
<TD WIDTH="49%" ALIGN="center"><IMG SRC="thumbs/Reader-01.jpg"></TD>

&nbsp ; <TD WIDTH="2%"></TD>
<TD WIDTH="49%" ALIGN="center"><IMG SRC="thumbs/Reader-02.jpg"></TD>
</TR>
<TR>
&nb sp; <TD ALIGN="center" VALIGN="top">Front view of the card-reader, notice the socket on the left hand side.</TD>
<TD></TD>
<TD ALIGN="center" VALIGN="top">Close-up of card-reader front.</TD>
</TR>

<TR>

&nbsp ; <TD ALIGN="center"><IMG SRC="thumbs/Reader-03.jpg"></TD>
<TD></TD>
<TD ALIGN="center"><IMG SRC="thumbs/Reader-04.jpg"></TD>
</TR>
<TR>
&nb sp; <TD ALIGN="center" VALIGN="top">Left side of card-reader showing socket.</TD>
<TD></TD>
<TD ALIGN="center" VALIGN="top">Top of card-reader showing battery.</TD>
</TR>

<TR>
&nbsp ; <TD ALIGN="center"><IMG SRC="thumbs/Camera-01.jpg"></TD>
<TD></TD>
<TD ALIGN="center"><IMG SRC="thumbs/Camera-02.jpg"></TD>
</TR>
<TR>
&nb sp; <TD ALIGN="center" VALIGN="top">Contents of camera housing, which is basically a Sony Cybershot DSC-U50 (Including screen)</TD>
<TD></TD>
<TD ALIGN="center" VALIGN="top">Outside of camera housing and the 512mb Sony memory stick.</TD>

</TR>

<TR>
&nbsp ; <TD ALIGN="center"><IMG SRC="thumbs/Dismantled-01.jpg"></TD>
<TD></TD>
<TD></TD>
</TR>
<TR>
&nbsp ; <TD ALIGN="center" VALIGN="top">Although you can't see it in the picture, the camera is fully functional.</TD>
<TD></TD>
<TD ALIGN="center" VALIGN="top"></TD>

</TR>

</TABLE>
</DIV>

<HR>

The camera is a Sony CyberShot DSC-U50 (details
<A HREF="http://www.dpreview.com/news/0308/03081501so nydscu50.asp">here</A>
and <A HREF="http://www.fotografovani.cz/art/nov_df_am/U5 0.html">here</A>),
which retails for around 250 pounds.<P>

The 512mb Sony memory stick (<A HREF="http://www.electronics-online.co.uk/acatalog /Sony_MSXM512_Memory_Stick_PRO_DUO_MSX_M512_Photog raphy.html">MSX-M512</A>) also goes for about 250 pounds.

</BODY>
</HTML>

Re:N KASE OV SHLASHDOTTERING (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369590)

LMFAO!

Great troll - not seen one like that for months.

Convenience or security... (5, Interesting)

SabrStryk (323739) | more than 10 years ago | (#8369392)

This is the sort of thing that makes one wary about the convenience ATMs available in many cities; you'll save more than a surcharge by sticking to your own banking company's systems.

On a side note, this is probably the most clever fraud I've seen in a long while. Great that these folks ripped out the innards of the scam device.

Re:Convenience or security... (5, Insightful)

cmowire (254489) | more than 10 years ago | (#8369427)

Well, not really.

The skimmer is attached to any arbitrary machine without the cooperation of the ATM owner.

So they can hit even your own bank's machines, if they so desire.

This is the best ATM scam since... well... the last ATM scam, where they put a complete ATM machine in place. Except they got caught because they tried to stiff their ATM machine supplier.

Re:Convenience or security... (5, Insightful)

Man Eating Duck (534479) | more than 10 years ago | (#8369510)


Great that these folks ripped out the innards of the scam device.

I'm not so sure about that. When something similar happened in Norway some time ago, the police was alerted and put the place under surveillance. The culprits were caught in the act of removing the devices.

I think the people who removed it should have done the same, thus helping to catch the bastards. For all they knew, the place could already be under surveillance, giving THEM the blame for the crime...

Re:Convenience or security... (1)

1u3hr (530656) | more than 10 years ago | (#8369571)

On a side note, this is probably the most clever fraud I've seen in a long while. Great that these folks ripped out the innards of the scam device.

Not really; though it satisfies our idle curiosity (there's a mirror in an earlier post if you can't see them) it would have been much better to get the cops to stake it out and catch the crooks when they came to get the data. Or just notified the bank and let them do it -- though I suppose they'd want to dismantle it and check that it wasn't transmitting, &/or disable it.

shouldn't ATM machines be designed better? (5, Interesting)

Monty845 (739787) | more than 10 years ago | (#8369393)

How hard would it be for someone to design an ATM machine that would make it more dificulty to conceal a card reader... or better yet one that made it impossible to insert your card if anything is attached... it would seem that with some common sense a designer good create some pretty good safe guards... or am I just missing something?

Re:shouldn't ATM machines be designed better? (4, Funny)

mcpkaaos (449561) | more than 10 years ago | (#8369428)

or am I just missing something?

Maybe the ATM designers just happen to be the same folks that are installing the cameras and readers. :)

Re:shouldn't ATM machines be designed better? (-1, Offtopic)

watertester (710743) | more than 10 years ago | (#8369443)

ATM machines... teh funny.

Re:shouldn't ATM machines be designed better? (1)

Laverne (700282) | more than 10 years ago | (#8369468)

Most of the ATM machines here in the Netherlands have protection against attaching devices to your card. The *thunk* you hear after inserting your card is some sort of lead knife thing that cuts the attached stuff off or so I've heard.
I dont think it's actually a knife but it closes off the slot after inserting the card which seems like the start of a good safe guard to me.

Re:shouldn't ATM machines be designed better? (1)

ianr44 (562580) | more than 10 years ago | (#8369540)

I think the parent post was refering to the devices that get attached to an ATM machine, not the card.

Re:shouldn't ATM machines be designed better? (1)

cmowire (254489) | more than 10 years ago | (#8369519)

The problem is that people do not commonly identify what a machine "should" look like, which ruins a lot of the possible techniques.

Diversity helps with some of it, however. Each reader needs to match the molding and coloring exactly.

You also have to remember that any sort of deterrent will need to be cheaper than the expected losses from not having the deterrent at all.

It's pretty simple to foil. Either be an ATM-facing camera that makes sure that the machine has no extra reader attached or just having the guy who fills it with cash take an extra hard look at it should bring the losses down to a reasonable level.

hunh... (5, Insightful)

mekkab (133181) | more than 10 years ago | (#8369398)

Was this the pass through kind? how was the camera attached? If I used one hand to cover the other hand while keying the PIN would that "thwart" it? Great pix but I could also use a little more commentary on what to watch out for.

Re:hunh... (2, Insightful)

djeaux (620938) | more than 10 years ago | (#8369421)

I did think the "visual autopsy" was a bit sketchy on the way the system was attached to the "host" ATM. It would've been useful if they'd taken a few pix before ripping the thing off the ATM.

The captions, while semi-helpful, left a lot unanswered...

OK, OK, I was using the mirror because the original was already in /. heaven... Maybe the original site had more detail?

Re:hunh... (0)

Anonymous Coward | more than 10 years ago | (#8369453)

The mirror is an exact copy of the orginal site & I have the exact same questions.

Re:hunh... (1)

cmowire (254489) | more than 10 years ago | (#8369456)

The trick, as far as I can tell, is to assume that people will be looking from any sort of angle. So you hover the palm of your hand over the PIN keypad and use your pinky and thumb to hit the lower row and the middle row, and then the other three fingers to hit the upper row.

If you are obscessed with somebody watching from your left, they'll see about watching from the right.

Great plan (4, Funny)

Papa Legba (192550) | more than 10 years ago | (#8369402)

recover 800 pounds worth of equipment and incurr 2000 pounds of bandwidth costs bragging about it. The guy who lost the 550 pounds is going think that was nice compared to what just got done to him by slashdot.

Re:Great plan (0)

Anonymous Coward | more than 10 years ago | (#8369452)

Well well, roast my raisins, that was *REALLY REALLY FUNNY* now wasn't it?

*sigh*

just got in and saw 'em (1)

i.r.id10t (595143) | more than 10 years ago | (#8369407)

just now, so the above A.S.S post is/was incorrect.

The setup looks possible, but the un-factory looking cutout at the top sorta gives it away.

That's silly (3, Insightful)

Rosco P. Coltrane (209368) | more than 10 years ago | (#8369408)

Making money by having an expensive digital camera to disguise it as ATM chrome, grabbing PIN numbers and making yes-cards out of the process is dumb. The guy would probably have made more money setting his hacked camera in some lady's shower and selling the videos on the net. Or gee, even selling the hacked camera itself to would-be private-eyes, as most of these folks are willing to spend a lot of money on any spy-ish electronic device, and it would be legal too.

Re:That's silly (4, Insightful)

Anonymous Coward | more than 10 years ago | (#8369538)

Are you retarded? One day of skimming numbers and magentic strip codes would net you more than twenty accounts, probably containing thousands of dollars each.

Yeah right (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369409)

It could pay a decent bye bye payment to /. mods so they get a life

This is how Skimmer works (5, Informative)

maliabu (665176) | more than 10 years ago | (#8369413)

in case you're wondering:

To accomplish this task, the thief places an electronic "skimmer" -- a card swipe device that reads the information on the card's magnetic strip -- on the ATM machine. Attached to the device, or placed discreetly elsewhere, is a small camera that captures the customer's PIN number when they enter it. The information is either collected by the device, or transmitted to a remote receiver. The thief then takes the codes and creates a counterfeit ATM card in order to empty the victim's bank account. Some skimmers can even capture the information and send it to the ATM at the same time. Since the machine works normally, the victim is unaware that they have just given a thief the key to their account. copied from here [state.fl.us] .

Re:This is how Skimmer works (-1, Redundant)

Anonymous Coward | more than 10 years ago | (#8369579)

Aren't you friggin brilliant.

Interesting camera (2, Interesting)

lukewarmfusion (726141) | more than 10 years ago | (#8369415)

Why'd they use a Cybershot? I personally have a DSC-P71, but you could get a much cheaper camera and do the same thing.

Anyway, I remember reading an article (might-a been on /.) about buying an ATM and hacking the software to record the information for him. It's supposed to be much harder to find than this kind of "noticeable" trick.

Re:Interesting camera (-1)

alex_ant (535895) | more than 10 years ago | (#8369549)

Omigod, you're not actually advertising your tech gadgets, are you? That's really sad.

Teller versus ATM (1)

superpulpsicle (533373) | more than 10 years ago | (#8369419)

You can always play it safe and wait in long lines at the Teller instead of using ATMs.

Though nowadays they got insane fees for using Tellers anyways.

Basically all banks want easy input and difficult output.

Re:Teller versus ATM (5, Funny)

nomadic (141991) | more than 10 years ago | (#8369455)

I seriously wouldn't have an idea as to how to get money from a teller. You like show your ATM card or something?

English plz (-1, Offtopic)

Anonymous Coward | more than 10 years ago | (#8369420)

to show one of them
Show one of who? The fraudsters? That doesn't make sense. Are you writing in English?
omfg ror lolf

Pin number (0)

sport_160 (650020) | more than 10 years ago | (#8369434)

That's a clever bit of kit. Friend of mine works at a bank and told me that these exist, but I have never seen one. My question is, do they take a video of you typing in your pin number after you put your card in? Must require some control electronics as well. Pretty sophisticated....

Helping it spread... (1)

Flozzin (626330) | more than 10 years ago | (#8369437)

I'm glad that the people getting ripped off also get drunk and go around showing others how to do exactly what happened to them. Way to keep the art alive.

Covered keypad (1)

maliabu (665176) | more than 10 years ago | (#8369459)

maybe it's time to introduce cover over the keypad, so that you need to slide your hand inside the 'cover' and touch-type your PIN.

but very soon, the fraudster's camera might have penetrating sensor to see through the cover. then not long after that, the cover has a protective shield, then.... cat and mouse.

Story authors should have posted a .torrent. (1)

waxmop (195319) | more than 10 years ago | (#8369461)

Those poor limey bastards probably had to use a fire extinguisher after the /.ing.

If I hadn't just finished my Red Stripe, thus rendering myself incapable of doing any work for the night, I would create a .torrent myself for the site. Maybe some other noble soul will, before the mirrors are all smoked also?

Re:Story authors should have posted a .torrent. (1, Offtopic)

BigBadBri (595126) | more than 10 years ago | (#8369558)

Kudos to you for consuming the fantastic products of Desmoes and Geddes.

You may also enjoy their 'Crucial Brew' (a kind of Red Stripe for men), and more especially, their Jamaican Ginger Beer, which though non-alcoholic is a damn fine libation.

I have a confession to make - a few years back, when Dolce and Gabanna started to become popular, I once asked a guy where he had got his Desmoes and Geddes T-shirt, as I'd like to get one.

And yes - I'm a poor limey bastard.

Idea! (4, Funny)

Dark Lord Seth (584963) | more than 10 years ago | (#8369465)

Have all Slashdotters run around ATMs and check for card skimmers. If found, remove card skimmer, take home, disassemble, build into $anything, add keypad and have your own PIN access system to $anything! All the while doing the rest of the world a favour by taking away card skimmers! Woot!

This only works with poorly designed ATMs (5, Insightful)

King_TJ (85913) | more than 10 years ago | (#8369474)

My bank uses ATM machines that suck the card completely into the slot, with only a little bit of a metal guide plate exposed below the slot. (Typically, they have a label with arrows printed on it that's affixed just beneath the slot, as well.) If you tried to add some sort of reader device to the front of the ATM, covering the original slot and plate, it would be fairly obvious it didn't belong there. I'm sure it might fool *some* clueless people - but it would surely be ripped from the machine pretty quickly, as someone a little more clueful realized what was going on. (After all, it would obscure part of the label, making it obvious it wasn't part of the original ATM machine.)

I have a feeling these card skimmers only work on specific models of ATMs (most likely, the little privately owned units you see in restaurants and gas stations, as opposed to actual bank-owned ATMs).

Re:This only works with poorly designed ATMs (5, Informative)

Giddeon (252506) | more than 10 years ago | (#8369582)

If you look at the site amarodeeps linked to in his comment [slashdot.org] , a cardstealer like the one shown would be able to steal swipes without too much difficulty. If you haven't seen the ATM before and don't know what it is supposed to look like, it will look quite natural. Most folks don't use the same ATM often enough to remember that the card guides on the sides weren't there last time.

Re:This only works with poorly designed ATMs (2, Interesting)

RodgerDodger (575834) | more than 10 years ago | (#8369589)

There have been scanner devices found on such "suck-the-card-in" ATMs, at least in Australia.

And you're right: a given type of scanner tends to only work with a given type of ATM. But there are varieties of scanners for most common types of ATMs.

Death of the PIN (4, Interesting)

So Called Expert (670571) | more than 10 years ago | (#8369478)

I wondered how long the four digit ATM PIN would last. I also realized that with the phone-cameras, it would be fairly simple to snap a shot of someone's PIN over their shoulder.

Could this be the death of the PIN? What's next - biometrics? Will this last only as long as it also cannot be spoofed?

ATM bug-detection should be a profitable area of research for the next few years.

Re:Death of the PIN (2, Insightful)

26199 (577806) | more than 10 years ago | (#8369577)

Unfortunately biometics violate one of the most basic principles of passwords... they can't be changed if compromised.

Re:Death of the PIN (0)

Anonymous Coward | more than 10 years ago | (#8369583)

Next? EMV's new requirements are already being hastily rolled out across the world.. already Malaysian ATM cards only come with a smart chip not a mag-stripe... the rest of the world is a year or so off.

The data will be 3-DES encrypted unlike the mag-stripe which can be read by anyone.

Jitterbug! (1)

erick99 (743982) | more than 10 years ago | (#8369505)

Here is anti-skimming technology I came across while googling my way through this topic:

...The task force will be looking at a number of ways to combat skimming, including the design of ATMs and magnetic stripe technology. Evans says a technology called Jitter is one way to beat skimming. "A skimming device needs a nice, smooth card reader. Jitter varies the speed and reverses the direction of the card intermittently and in a random fashion when the card is entered." Jitter is being deployed mainly on newer, motorized card readers...

Pretty good idea. I know that I will be very vigilant from now on when using an ATM.

Keep Smiling!

Erick

Nobody checks ATMs? (0)

Anonymous Coward | more than 10 years ago | (#8369524)

If my job would be to maintain ATMs I would check if someone has tempered with them...

Does anyone remember the 80s cable movie... (0)

Anonymous Coward | more than 10 years ago | (#8369535)

...where this electronics type chick uses some signal capturing stuff and an occiloscope to record data from a nearby van as people used the ATM? She then made some cards, and she and a cohrt then went extracting money. Anyone remember the title of this movie?

what i wanna noe (0)

Anonymous Coward | more than 10 years ago | (#8369551)

Is how did they get the camera to catpure the pin numbers.. was it sound activated ??

Alternative approach (5, Insightful)

archilocus (715776) | more than 10 years ago | (#8369562)

Hate to be a party pooper but didn't you consider leaving it there and calling the cops ?

If you had they might have been able to bust the individuals concerned and saved some innocents down the track a lot of grief.

This way you got 800 quid's worth of stolen electronics, the thief wrote off some capital investment and a couple of thousand /.'ers got some pre-pubescent excitement. Wahooo.

Let's mug the muggers! (1)

dark-br (473115) | more than 10 years ago | (#8369564)

we believe we have reclaimed about 800 pounds worth of kit.

Ok! Time to check all the ATM nearby, bbl!

Let me.. (0)

Anonymous Coward | more than 10 years ago | (#8369568)

..tell you about my story. This and that happened and.. oh.. I made pictures as wel$%"& *SLASHDOTTED*

When will people learn..

Interesting!! (3, Insightful)

annielaurie (257735) | more than 10 years ago | (#8369569)

A couple of months ago my Hotmail account was besieged with spams offering to show me how to make my first million by installing and servicing their ATM machines. I kept wondering if they wanted to make me a shill for some skulduggery like that described in the article. The interesting part was that the ATM's so advertised would be located "in my area," which they had pinpointed at Washington, DC (not far from here).

Like others here, I've become very leery of using ATM's located anywhere but at banks. I've been driving on long trips a great deal recently, and I've also learned to be a bit discerning about card-swipers in gas stations and even grocery stores I'm not familiar with. It seems a safer bet to hit a bank occasionally to withdraw my allotment of yuppie food coupons ($20 bills) and spend those instead.

Anne

prevention ... (5, Insightful)

another_twilight (585366) | more than 10 years ago | (#8369587)

Most of the scams I have seen like this rely on recording your PIN based on what you type.

The earliest versions simply had someone peering over your shoulder, or using a camera/telescope mounted up and behind and stealing the original.

Get in the habit of 'embedding' your PIN within a larger number. Type this longer number too lightly to casue the pressure sensor to register and varying your pressure only on the 'key' digits. It won't fool decent resolution or close observation, but given the angles/lighting conditions and cheaper digitial cameas that are starting to show up, I am guessing that they are going to have trouble working out which hits are the real McCoy.

Sure it relies on making your case more difficult than your neighbours, but to an extent that is all most locks and security devices do. Sure it's paranoid, and it does take some effort to set up, but muscle memory handles most of the work after a while and these days I only get a few false hits. YMMV

Insert Your Card Machines Only? (4, Interesting)

MBCook (132727) | more than 10 years ago | (#8369588)

The hack done (and those you usually hear about) work by modifying a machine where you have to insert your card. Does anyone know of the machines where you just swipe your card yourself are safe from this kind of tampering? I would think it would be VERY hard to add a skimmer without it being noticed unless you had enough physical access to the machine to take the cover off, make another little hole where the card swipes by and position the magnetic reading head in there, etc.

Still, very interesting to see. I'm quite suprised at the digital camera half of it. Of course something like using fingerprints or some other kind of biometric would make things much harder for the thief.

Torrent of site (0)

Rexz (724700) | more than 10 years ago | (#8369597)

I wasn't able to get the full pictures before the site died, but the thumbnails are fairly big:

Link [no-ip.org]

Load More Comments
Slashdot Account

Need an Account?

Forgot your password?

Don't worry, we never post anything without your permission.

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>
Create a Slashdot Account

Loading...