IOActive security researcher Ruben Santamarta figured out a way to hack into the firmware of a counterfeit money detector and make it accept any piece of paper as a valid banknote. The device, which happens to be widely used in Spain, is called Secureuro and is specifically designed to ensure Euro banknotes are legitimate. Until, of course, Santamarta had his way with it:
Santamarta discovered he could access the firmware, which is not encrypted, on the Secureuro without any physical tampering of the hardware. “My intention is not to forge a banknote that could pass as legitimate, that is a criminal offense,” he explains. “We are not exploiting a vulnerability in the device, just a design feature.”
➤ Hacking a counterfeit money detector for fun and non-profit
The <3 of EU tech
The latest rumblings from the EU tech scene, a story from our wise ol' founder Boris, and some questionable AI art. It's free, every week, in your inbox. Sign up now!
Top Image Credit – Thinkstock
Get the TNW newsletter
Get the most important tech news in your inbox each week.