Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 02-05-2019, 06:53 PM   #1
AdultKing
Raise Your Weapon
 
AdultKing's Avatar
 
Industry Role:
Join Date: Jun 2003
Location: Outback Australia
Posts: 15,601
:stop Be Careful using Casino Loyalty/Rewards Machines

Used in Casino properties around the world, Atrient Loyalty Machines collect your data and reward you for using gaming machines and other Casino facilities. Unfortunately these machines are insecure to the point of being so open you could drive a Panzer tank division through the holes.

Oh and then COO of the company beat up a security researcher at a London conference less than 24 hours ago.


Quote:
Following a serious vulnerability disclosure affecting casinos globally, an executive of casino technology vendor Atrient has assaulted the security researcher who disclosed the vulnerability at the ICE conference in London. This is the story of a vulnerability disclosure gone bad, one involving the FBI, a vendor with a global customer base of casinos and a severe security vulnerability which has gone unresolved for four months without being properly addressed.

Our story begins with two white-hat security researchers, Dylan and Me9187, who were on a Shodan safari back in September when they noticed what looked like a casinos player reward server (with no authentication) exposed to the public internet. After a little more investigation by the researchers, it became obvious that the server was supporting player reward kiosks in different casinos all over Las Vegas.

These kiosks are made by a vendor called Atrient who market them as a 'PowerKiosk Marketing Platform' and sell them to casinos globally who then use these kiosks to engage their casino customers with a loyalty reward program.

https://www.secjuice.com/security-re...d-ice-atrient/
AdultKing is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 02-05-2019, 06:55 PM   #2
GAMEFINEST
Make STACK$
 
GAMEFINEST's Avatar
 
Industry Role:
Join Date: Nov 2006
Location: sexy time
Posts: 14,436
Everyone collects data man
__________________
Compound interest.
GAMEFINEST is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 02-05-2019, 06:56 PM   #3
AdultKing
Raise Your Weapon
 
AdultKing's Avatar
 
Industry Role:
Join Date: Jun 2003
Location: Outback Australia
Posts: 15,601
Quote:
Originally Posted by GAMEFINEST View Post
Everyone collects data man
This is different. Read the story.
AdultKing is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 02-06-2019, 02:48 PM   #4
lezinterracial
Confirmed User
 
Industry Role:
Join Date: Jul 2012
Posts: 3,080
Wild story.

I remember watching a show where a Las Vegas Gaming Commission guy updated the slot machines to always win when a specific code was put it. The reason he did it, A whistle blower came forward saying the casino company he worked for was misrepresenting the winning odds. The whistle-blower was shot in his front yard and the hit man was never caught.
__________________
Live Sex Shows
lezinterracial is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 02-06-2019, 03:12 PM   #5
lezinterracial
Confirmed User
 
Industry Role:
Join Date: Jul 2012
Posts: 3,080
Just did a search on shodan for kiosk, any idea what this is?
104.248.44.87:8081
__________________
Live Sex Shows
lezinterracial is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 02-07-2019, 04:29 AM   #6
AdultKing
Raise Your Weapon
 
AdultKing's Avatar
 
Industry Role:
Join Date: Jun 2003
Location: Outback Australia
Posts: 15,601
Quote:
Originally Posted by lezinterracial View Post
Just did a search on shodan for kiosk, any idea what this is?
104.248.44.87:8081
My advice is don't do this unless you know what you are doing and don't post things you find on GFY
AdultKing is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 02-07-2019, 07:02 AM   #7
Scott McD
Too lazy to set a custom title
 
Scott McD's Avatar
 
Join Date: Nov 2002
Location: Glasgow, Scotland
Posts: 67,795
Quote:
Originally Posted by AdultKing View Post
Used in Casino properties around the world, Atrient Loyalty Machines collect your data and reward you for using gaming machines and other Casino facilities. Unfortunately these machines are insecure to the point of being so open you could drive a Panzer tank division through the holes.

Oh and then COO of the company beat up a security researcher at a London conference less than 24 hours ago.





https://www.secjuice.com/security-re...d-ice-atrient/

Shocking yet not even a little surprising...
__________________


I Buy My High Quality Traffic Here, You Should Too!

Scott McD is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 02-07-2019, 07:12 AM   #8
AdultKing
Raise Your Weapon
 
AdultKing's Avatar
 
Industry Role:
Join Date: Jun 2003
Location: Outback Australia
Posts: 15,601
Quote:
Originally Posted by Scott McD View Post
Shocking yet not even a little surprising...
Yep. Every other day there's a new security fail to read about.
AdultKing is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >

Bookmarks

Tags
casino, casinos, reward, vulnerability, security, machines, atrient, kiosks, vendor, story, player, globally, loyalty, researchers, disclosure, researcher, server, conference, london, september, dylan, me9187, white-hat, begins, shodan



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.