News for hackers. Stuff that matters.
Re:Why are McDonald’s Self Service Kiosks so hackable? by notatoad on Monday July 25, 2022 @05:26PM (#32231151)
the "server" in this case provides a one-time key to sign the transaction with, which is only valid for that transaction and that merchant. if you have a large antenna that can provide valid transaction keys for a trusted merchant, then yes, you have a significant exploit.

to my knowledge, nobody has ever successfully demonstrated an exploit of this nature.

Re:Why are McDonald’s Self Service Kiosks so hackable? by tjoff on Monday July 25, 2022 @05:51PM (#32231412)
The "server" in this case is a rouge device.

It is trivially employed.

Re:Why are McDonald’s Self Service Kiosks so hackable? by notatoad on Tuesday July 26, 2022 @12:44AM (#32234328)
I’m not sure why the color of the device matters here