RAM Scrapers

[Boris Mohar]

http://digg.com/d31DOXR

POS devices has at least two pertinent meanings.

 

[Virus Guy]

http://digg.com/d31DOXR

POS devices has at least two pertinent meanings.

I put digg.com in my hosts file.

 

[FromTheRafters]

I put digg.com in my hosts file.

I put only localhost in mine...

The target was an article about the insecurity of POS systems - nothing
new really - in some cases the person behind you in line can print out a
duplicate reciept (yours) by just knowing the hotkey combination.

The *other* meaning of POS was not lost on me either. )

 

[Virus Guy]

The target was an article about the insecurity of POS systems -
nothing new really - in some cases the person behind you in
line can print out a duplicate reciept (yours) by just knowing
the hotkey combination.

What - is that the worst they can do?

Why is it useful to have a duplicate of someone else's reciept?

 

[FromTheRafters]

What - is that the worst they can do?
No.

Why is it useful to have a duplicate of someone else's reciept?

That depends on what information is on the receipt.

I ran across this whitepaper while researching after the company I work
for had their system compromised (even though they met the security
requirements in place at that time). 4.2 million credit and debit card
numbers may have been compromised, I just wanted to know more about how
the system was meant to work. This paper is about the vulnerabilities in
the system.

http://www.hackerfactor.com/papers/cc-pos-20.pdf

 

[Dustin Cook]

What - is that the worst they can do?

Why is it useful to have a duplicate of someone else's reciept?

Depends on whats on the receipt. Haven't you ever heard of dumpster diving?