Windows XP ATMs

[chrisredfield93]

ATMs set to be left vulnerable as Microsoft ends support for Windows XP | Mail Online

 

I think this a time to be shown concern if the banks and the makers of the ATMs haven't tested with a newer version of windows.

 

And how many of retailers and other businesses are running XP or older operating systems , they could be prone to anything once support has ended.

 

I know the best option would be make sure that these computers don't connect to the internet but if everything goes up-to head office as they claim, then I doubt very much they have a dedicated cables running up and down the country.

 

That's my opinion.

 

And when I had been looking at updates in the past, I had been reading on what fixtures have been applied and what concerns me with Microsoft that they claim products like notepad that suppose to have no internet access at all can be breached and used against people why Microsoft are you creating applications and all they components connect to the internet? It be simpler if you just had one component / file connecting to the internet than many and I have noticed over the last couple years that you seem to be giving less info of what these updates fixing.

 

Just my 2 pence

[Michael]

It could well be they're connected to a private network (via phone lines or something else), but I very much doubt they have Automatic Updates enabled on each ATM. I'm pretty sure it's going to be very customised and very locked down, with minimal components installed. I'd bet the configurations they're using are probably years out of date and the fact XP's due to be retired will make no difference at all.

 

They will no doubt upgrade ATMs at some point, especially as the hardware in ATMs must also have a shelf life as with any computer.

[Norphy]

It's a bit different for ATMs though, they'll be running XP Embedded rather than XP. If I'm reading this right, that will be supported for another three years yet:

 

Windows Embedded | Product Lifecycles

 

Not to mention, I doubt that these things are connected to the internet.

[Quackers]

I aint that concerned, my dads an ATM engineer and you should be more concerned about people putting things on the cash machine like fake fronts than what OS the cash machine is running. These ATMs are on a private network, not general machines used by people for surfing the web.

 

Whilst every now and again a nasty flaw does appear most of the 'Updates' fix things that we would never actually encounter, and most of the bulletins say things like "The vulnerability could allow remote code execution if an attacker convinces a user to visit a specially crafted website or a website that hosts specially crafted content." Well what are the chances of you visiting that specifically crafted website? Quite high I'm guessing if your a regular torrenter or go looking for nocd cracks and the like, but if your going to just go to your bank, bbc, yahoo, edugeek i don't thing the danger is as bad as some people would have us believe, and defiantly not on private networks running very specific tasks like cash machines. Only area i would be concerned about is if a new worm was made that XP was vunarable to like conflicker or blaster. Whilst i don't blame MS for not releasing new updates for XP like IE, WMP, i do think they have a social responsibility to keep it from big vulnerabilities until its usage vanishes to a very low number in use.

[MatthewL]

Only till a few years ago many we're running 98 and 2000. Don't worry about it too much, more chance of your details been taken by a fake front!!!

[Arthur]

www.edugeek.net/forums/general-chat/129526-places-still-using-xp.html#post1106829

 

The first public demonstration of an ATM hack was given in 2010 - but how bad is this threat really? It turns out there is a multi-million dollar business behind ATM hacks.

 

https://www.youtube.com/watch?feature=player_embedded&v=0c08EYv4N5A