When snacktime DDoS attacks...

ChrisL

http://www.datacenterdynamics.com/content-tracks/security-risk/university-suffers-ddos-attack-from-iot-vending-machines/97808.article

When you want a Snickers and your entire college network goes down.

RojoLoco

Or... when you're someone at a college with purchasing power and you think it's a great idea to buy internet enabled vending machines even though you're far too incompetent to understand, investigate, or mitigate the potential risks, and somehow it all goes badly....

I'd call that attack "well deserved". Now they should hire someone to buy vending machines who's not an imbecile.

ChrisL

I just don't understand WHY you'd need a connected vending machine.

RojoLoco

@ChrisL said in When snacktime DDoS attacks...:

I just don't understand WHY you'd need a connected vending machine.

Maybe they had an app to see if your favorite snacky foods were in stock at any given moment...

"Does vending machine D-0415 have any cinnamon life savers right now? 'Cause them's is mah jam."

Kelly

@ChrisL said in When snacktime DDoS attacks...:

I just don't understand WHY you'd need a connected vending machine.

Credit Card transactions.

RojoLoco

@Kelly said in When snacktime DDoS attacks...:

@ChrisL said in When snacktime DDoS attacks...:

I just don't understand WHY you'd need a connected vending machine.

Credit Card transactions.

Wouldn't a dial-up connection that dumps transactions once a day be sufficient?

Kelly

@RojoLoco said in When snacktime DDoS attacks...:

@Kelly said in When snacktime DDoS attacks...:

@ChrisL said in When snacktime DDoS attacks...:

I just don't understand WHY you'd need a connected vending machine.

Credit Card transactions.

Wouldn't a dial-up connection that dumps transactions once a day be sufficient?

Maybe, but they're probably doing fraud checks on each swipe.

RojoLoco

@Kelly said in When snacktime DDoS attacks...:

@RojoLoco said in When snacktime DDoS attacks...:

@Kelly said in When snacktime DDoS attacks...:

@ChrisL said in When snacktime DDoS attacks...:

I just don't understand WHY you'd need a connected vending machine.

Credit Card transactions.

Wouldn't a dial-up connection that dumps transactions once a day be sufficient?

Maybe, but they're probably doing fraud checks on each swipe.

True... and all the more reason for them to be secured better.

JaredBusch

@RojoLoco said in When snacktime DDoS attacks...:

@Kelly said in When snacktime DDoS attacks...:

@RojoLoco said in When snacktime DDoS attacks...:

@Kelly said in When snacktime DDoS attacks...:

@ChrisL said in When snacktime DDoS attacks...:

I just don't understand WHY you'd need a connected vending machine.

Credit Card transactions.

Wouldn't a dial-up connection that dumps transactions once a day be sufficient?

Maybe, but they're probably doing fraud checks on each swipe.

True... and all the more reason for them to be secured better.

The CC transaction connection is a likely a self contained bit like your stand alone reader at a mom and pop restaurant. Those are manually connected to a service on initial setup and then they just go on their merry way with their own secure tunnel.