youtube.com — This video shows a couple guys hacking the FedEx Kinko Smart Cards. It actually works. They paid a buck and hacked the card to give them $50 bucks. They could have easily cashed out that 50 bucks at the cashier.
Mar 3, 2006 View in Crawl 4
jack_dtMar 3, 2006
What is this? Blair Witch 4?
shadedreamMar 3, 2006
Ok its really sad here how no one is getting the point of this. It isnt about "OMFGQTF look what I can do! you got PWND Kinkos!!111!!" This is demonstrating the technology is flawed and not secure so that the companies developing it FIX the problem. One of the problems with the DMCA is it protects faulty and weak protection schemes by trying to stop people from spreading how easily it is to circumvent them (WEP anyone?).
vankalkerMar 3, 2006
Its the content of the video you need to pay attention to not the lame flash version of a hidden camera going through Kinko's. And this has been well documented that there is no encryption on these cards and they are just proving that you can go into Kinko's and walk out 5 minutes later with x amount of dollars if you want.These are real security analysts doing their job exposing the lack of security on this system.
Closed AccountMar 4, 2006
it's not for use, it's to prove it's weak to attacks. fedex rolled out the typical corperate bulls**t about it not working, so they made a video to show it's true. they commited no crime in doing this, since they didn't use the card.
tekoverrideMar 4, 2006
Oh that was youtube! I thougth I was watching google video for a minute. That looks like too much work to make only 48 dollars :)
yakksohoMar 4, 2006
We do have security cameras everywhere and if we see people hacking a card they will be caught easily. The Kiosk is also in full view of every employee from ExpressPay area and production.Regarding the disclaimer: we can refuse the right to return money on your card at any time and the card has no "cash value" itself. If you try to cash a card with more than $20 on it you are considered highly suspect because all Credit Cards can be used in the machine so it is very unlikely an honest person would put more than $20 on a card at any one time.Furthermore employees assist or see almost everybody who uses the Kiosk so it would be difficult ot get away with adding false value to the card.
yakksohoMar 7, 2006
In my district employees are protective of the cards. A cashier has no obligation to return the money on the card if he thinks it to be a fraudulent or stolen card and the suspicion is ratified by others. Regarding a situation with more than $20 on a card; the reason this is unlikely is because if Bob needs to run a $60 job, he will most likely use a credit card. There is no advantage ot using cash and most large jobs run in ExpressPay are business-related. In fact the customer will frequently use a company credit card or write a cheque by using a Convenience Card.The Express cards were designed for the convenience of Average Joe making 1-100 copies with no desire to use a credit card for such a neglible amount as $0.09 or $1.00. Also the cash cards are very inefficient for large jobs because if you make a mistake of any kind or underestimate, your card will run out and you have to get run back to the kiosk to add value to it. Far more people use credit cards than cash cards, and the majority of them fall in the >$8 range.