Easy login into Korean Point-of-Sale device
December 27th, 2011 by Aviram, Filed under: Culture, Full Disclosure, Physical Security
Some things are cross-culture it seems. Especially when it comes to trivial security mishaps.
So I’m at a PoS terminal in a large department store in Seoul and while I’m waiting for the register to ring up my order, I look at the touchscreen where I will be asked for my signature in a moment. I notice a little icon that looks like ‘settings’. How can I not click on it?

Oh, it needs a password. Must be this PCI compliance thing everybody is raving about. And no, wiseass, 1-2-3-4-5 doesn’t work.
…But 1-2-3-4 does.
Yup. Unlocked.
Now I need to polish up my Korean to figure out what to do next. Suggestions?
Sorry for the full disclosure guys. And that includes all of you that now need to change your luggage combination.
-
@itinsecurity






