It is also likely that operator manuals for other ATM brands are readily available, Goldsmith said.

However, as Goldsmith noted, a criminal with access to machines with default passwords could launch a major crime spree.

My guess is that most of these mini-bank terminals are sitting around with default passwords untouched,' Goldsmith said.Īccording to Tranax, the Mini-Bank 1500 can dispense a maximum of 40 notes per transaction, limiting a criminals withdrawal at a single machine and using a single card. 'If you get your hand on this manual, you can basically reconfigure the ATM if the default password was not changed. In an interview with eWEEK, Goldsmith said he first dug around on Tranax Technologies Web site and found a knowledge base article that mentioned that the ATM is programmed with passwords that can be found in the operators manual. Goldsmith, a respected researcher who co-founded and previously led Symantecs Security Academy, said he traced clues from the video to identify the make and model of the ATM, a and started an experiment to see how easy it would be to legally obtain an operator manual. Dave Goldsmith, founder and president of penetration testing outfit Matasano Security, in New York, did not say how he obtained the operator manual-which contains master passwords and other sensitive security information about the cash-dispensing machines-but an eWEEK investigation shows that a simple Google query will return a 102-page PDF file that provides a road map to the hack.

Tranax master password reset