DEF CON Safe Mode - Trey Keown and Brenda So - Applied Cash Eviction through ATM Exploitation

[@Solid_Fuel]

audio quality already makes this so much better than so many other talks on this channel

[@celestemangonya]

yeah for a conference with a huge number of computer professionals they sure seem to have an issue recording a simple talk lol

[@summarity]

Every single presenter has a different solution for audio, yet they're all better than the in-person DEF CON recordings ever were.

[@DavidTomaschik]

It's got to be so hard to give a talk to just a camera. No audience energy to feed off of. Great work for doing so.

[@ClumsyCars]

Here I was sitting here thinking to myself "what a dead crowd"

Just imagine a Twitch chat going "driink! DRIIIIIIIIINK!"

[@logicawe]

I just came to watch it rain cash. I was not disappointed. 49:15

[@neverbetter5434]

The video ending with cash just dripping out of the ATM is so BALLER. You guys did such a great job walking everyone through the reverse engineering that went into this and the conclusion is totally worth it. Next time drop the mic!

[@DrTune]

"Copies the TCP packet to a global buffer without a bounds check". ... LOL!

[@matrixstorm00]

Really enjoyed this talk. Thank you!

[@pyramydseven]

Great job. Sadly, as long as the people who make decisions about investing in security, which I would like to say know absolutely nothing about technology let alone security, continue to ignore advice, continue to cut corners, continue to exploit their employees and/or consultants, these types of situations will continue to exist. Great job guys and gals!

[@uuuuuhhlettuce3909]

Sad for whom? ;)

[@swine13]

@@uuuuuhhlettuce3909 well, us. The consumers who get left with all the costs being pushed on us, at the end of the day. Every time a big company like this gets robbed, you think the CEO foots that bill? No, they just restructure their payment models and shift things around and we end up paying for it.

[@psy0rz]

Very good talk and excellent reversing job!

[@andrewbonstrom2252]

Excellent talk! Thanks for the share

[@u0000-u2x]

great presentation. nice job rbs

[@excitedbox5705]

why desolder the chip multiple times instead of mounting it on a pcb and with some test pads? Or make it socketed. Once you can load your own firmware you could just activate the make it rain function by activating the bill dispenser.

[@jamesfreewill3084]

Can we talk

[@boubtanehoussem9104]

Great talk ! Keep it up

[@wisid]

Awesome, doom. The challenge should be shooting enemies to get your cash

[@David-mw8vr]

red balloon always does the coolest shit they were on vice and did some awesome stuff

[@Theobroma-p3n]

Best. panel title. ever.

[@thomaskellar5148]

Great talk

[@jamesfreewill3084]

I been working on this project for fun myself

[@ben-brady]

First, good talk.

[@Dorumin]

man the talk is 50 minutes long and you commented 3min after posting

[@pyramydseven]

@@Dorumin Hey, some people are just great at determining an overall level of success in mere minutes. Or, perhaps this person has already watched it, perhaps in person. Perhaps, they hacked the matrix.

[@Dorumin]

@@pyramydseven cue "What is real" speech

[@lilz3bra]

@@Dorumin I used to "study" 600+ pages in 30 minutes before an exam back in college so it might be possible to watch an hour long video in 2 minutes...

[@swine13]

@@lilz3bra you can definitely do this with the titanic. You can just skip to the last 3min because it turns out the boat sank anyway

[@ScottHughes]

Great talk, but "umm" needs to be piped to /dev/null

[@TreyKeown]

Haha! Unfortunately true, wish it were that easy. Didn't catch the level of "umm"s until well after we shot the talk.

[@Prohibitorum]

@@TreyKeown Recording and seeing yourself talk like this is the easiest way to fix these things! Next talk you'll do it less, I'm sure. I find just quiet instead of 'uhm' works great, and found it easy to adapt to doing that.

[@swine13]

@@TreyKeown My favourite thing to do was just try and consciously change my "umm"s to "uhh/ahh"s - I had a friend who worked in the business of phone sales, as he was saying that making "uh" sounds instead of "um" can make you sound more... polished? Professional? I can't remember the P word but it was supposed to sound better to people. I found it was way easier to get myself saying "uhh" reliably, as opposed to un-teaching myself a habit that I've had for 30 or so years in saying "um". 😁 (Fwiw i dont even know what the difference is. If there is one, it's definitely working on a subconscious level AFAICT... 🤔) Ps. really cool talk - thanks!!

[@SergeyKataev]

Nice :D

[@SD-xu3mz]

based

[@QuadDerrick]

hope bankers dont kill brenda so like they killed jack barnaby

[@henke37]

And of course doom runs smoother than any other software on the system.

[@excitedbox5705]

Did you try enabling USB? A lot of ATMs have the USB turned off as a security measure. There was a gang of thieves ripping the Camera out of ATMs and hooking a USB keyboard to the wires.

[@swine13]

But what if there isn't any keyboard drivers or anything written into the firmware? Like at the start? Wouldnt the USB keyboard just not work?

[@excitedbox5705]

@@swine13 ATMs run on windows and unless they take out the driver or like I suggest disable it, the keyboard will work. That is how this gang got in. The ATMs used USB for their security cameras so by cutting the camera off and splicing in a USB keyboard they were auto detected. USB is not like ps2 or serial where the system only activates the device on boot since you don't want to reboot to use a flash drive or whatever.

[@BillyHudson1]

Canadians are nice but don't mess with our tax man.

[@meonline44]

Ummm...

[@SLLabsKamilion]

This is so frustrating to watch with all the 'um' and 'uh' pauses from Trey.

[@lynzoido]

Mey lau. I cook you eat. Shin shin. So life-like

[@lynzoido]

@@remley8877 me rikey

[@cypher9000]

I'm so ronery.

[@glitchedpixelscriticaldamage]

Lame.

[@cypher9000]

Then do better.

[@alexeilindes7507]

Awww cute 😍

[@internetdoggo4839]

no u