Two Manitoba teens on a lunch break from school just proved that ATM security isn't all it's cracked up to be - and they didn't even have to use a sneaky ATM skimmer.
Instead, they used something much simpler to break into a Bank of Montreal ATM: the owner's manual.
I'm not joking. They looked up the owner's manual online, found the ATM's default password and put it in the machine. In seconds, they had full access to the ATM transaction log, how much money it had and other sensitive information.
Yep, the bank had never changed the ATM default password. Comforting, isn't it?
This is where the story gets heartwarming.
Instead of stealing money or information, the Canadian teens simply changed the ATM's greeting to "Go away. This ATM has been hacked."
Their next stop was to report their "crime" to a local BMO branch. The BMO branch returned the favor by sending them back to school with an excuse that, according to the Winnipeg Sun, read:
Please excuse Mr. Caleb Turon and Matthew Hewlett for being late during their lunch hour due to assisting BMO with security.
Hacking isn't just performed by sunglasses-at-night, trench-coated cybergods. As these teens proved, the best hacks are the ones that exploit a lazy security system.
“We thought it would be fun to try it, but we were not expecting it to work,” Hewlett told the Winnipeg Sun. “When it did, it asked for a password.”