Menu
Credit card terminals have used same password since 1990s, claim researchers

Credit card terminals have used same password since 1990s, claim researchers

Many users never changed the password thinking it was unique to them

While retailers battle breaches that have resulted in tens of millions of credit card numbers stolen, word comes from the RSA Conference in San Francisco that a major vendor of payment terminals has been shipping devices for over two decades with the same default password.

The vendor wasn't named by the researchers, David Byrne and Charles Henderson, but they did disclose the password: 166816.

A Google search reveals that's the default password for several models of credit card terminal sold by Verifone, a Silicon Valley-based vendor that says it connects 27 million payment devices and has operations in 150 countries.

Verifone didn't immediately comment on the claim.

The researchers said that the password remains in use on nine out of ten terminals they see from the vendor, in part because customers mistakenly assume it is unique to them.

The RSA Conference is a major annual event for the security industry and the comments of the two researchers were reported by The Register and SC Magazine.

Such conferences are often used to highlight poor security practices or disclose how hackers are targeting systems. The hope is that by making such information more widely known, companies and users will be more alert to cybersecurity and change bad habits.

Cybercriminals have been increasingly targeting vulnerabilities in point-of-sale terminals.

The largest and best known of these was the hack of Target, which affected up to 70 million customers. A breach at Home Depot compromised the payment cards of up to 56 million customers, while systems have also been hacked at Neiman Marcus, White Lodging, Michaels and The UPS Store.

In part because of these breaches, the payments industry in the U.S. is moving to chip-based cards, but researchers note the security on the cards isn't bullet-proof and in part depends on the payment terminals and other systems at retailers.

Martyn Williams covers mobile telecoms, Silicon Valley and general technology breaking news for The IDG News Service. Follow Martyn on Twitter at @martyn_williams. Martyn's e-mail address is martyn_williams@idg.com

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Tags securityVeriFoneAccess control and authentication

Featured

Slideshows

Reseller News launches inaugural Hall of Fame lunch

Reseller News launches inaugural Hall of Fame lunch

Reseller News welcomed 2015 and 2016 inductees - Darryl Swann, Dave Rosenberg, Gary Bigwood, Keith Watson, Mike Hill and Scott Green - to the inaugural Reseller News Hall of Fame lunch, held at the French Cafe in Auckland. The inductees discussed how the channel can collectively work together to benefit New Zealand, the Kiwi skills shortage and the future of the industry. Photos by Maria Stefina.

Reseller News launches inaugural Hall of Fame lunch
Educating from the epicentre - Why distributors are the pulse checkers of the channel

Educating from the epicentre - Why distributors are the pulse checkers of the channel

​As the channel changes and industry voices deepen, the need for clarity and insight heightens. Market misconceptions talk of an “under pressure” distribution space, with competitors in that fateful “race for relevance” across New Zealand. Amidst the cliched assumptions however, distribution is once again showing its strength, as a force to be listened to, rather than questioned. Traditionally, the role was born out of a need for vendors and resellers to find one another, acting as a bridge between the testing lab and the marketplace. Yet despite new technologies and business approaches shaking the channel to its very core, distributors remain tied to the epicentre - providing the voice of reason amidst a seismic industry shift. In looking across both sides of the vendor and partner fences, the middle concept of the three-tier chain remains centrally placed to understand the metrics of two differing worlds, as the continual pulse checkers of the local channel. This exclusive Reseller News Roundtable, in association with Dicker Data and rhipe, examined the pivotal role of distribution in understanding the health of the channel, educating from the epicentre as the market transforms at a rapid rate.

Educating from the epicentre - Why distributors are the pulse checkers of the channel
Kiwi channel reunites as After Hours kicks off 2017

Kiwi channel reunites as After Hours kicks off 2017

After Hours made a welcome return to the channel social calendar last night, with a bumper crowd of distributors, vendors and resellers descending on The Jefferson in Auckland to kickstart 2017. Photos by Maria Stefina.

Kiwi channel reunites as After Hours kicks off 2017
Show Comments