Teardown of an Ingenico iWL250 Payment Terminal

แชร์
ฝัง
  • เผยแพร่เมื่อ 26 พ.ย. 2024

ความคิดเห็น • 23

  • @WizardTim
    @WizardTim 3 ปีที่แล้ว +29

    Those pieces of PCB material with a step machined in that are soldered on top of the legs for the connectors are very likely just to protect against someone drilling a hole in the back case and directly probing the connections to the card readers and thus stealing people’s card details.

  • @f83jg79
    @f83jg79 3 ปีที่แล้ว +3

    The other slots on the modem board are likely for a SAM card or a similar smartcard in the standard ID-000 size used for additional authentication.

  • @donpalmera
    @donpalmera 3 ปีที่แล้ว +1

    I doubt the key sram is in the PCB material. It'll be in one of the special SoC/Microcontrollers.
    The is a CCC (I think) presentation about extracting the keys from cable TV boxes that details breaking down similar setups (albeit with less tamper proofing). That guy eventually worked out enough of the chips to load a trojan onto the chip and extract the keys.

  • @jagdtigger
    @jagdtigger 3 ปีที่แล้ว +4

    8:04 Its a fallback if the chip malfunctions on the card, i know because i had one if my cards fail in this way.

  • @jaro6985
    @jaro6985 3 ปีที่แล้ว +4

    They might have got rid of it due to the 3G shutdown. Any sort of 3G comms equipment is basically worthless at this point.
    The devices I use seem to occasionally self-trip their tamper detection mechanism, rendering them useless. They also don't use epoxy potting, as you say, expensive to produce. I think it just relies on the numerous serpentine traces. There may be other small things like light sensors or accelerometers as well.

    • @jacobs8
      @jacobs8 2 ปีที่แล้ว

      Is the device essentially broken after dismantle?

    • @jaro6985
      @jaro6985 2 ปีที่แล้ว

      @@jacobs8 Yes. Only the manufacturer is able to reload the wiped volatile keys onto the device and re-enable it for use.

    • @unicodefox
      @unicodefox ปีที่แล้ว

      @@jaro6985 how does the device behave when it's been tripped? does it just die with no signs of life? show an error? fail transactions?

    • @jaro6985
      @jaro6985 ปีที่แล้ว

      @@unicodefox It sends an error to the user that shows its been physically tampered, and is unusable. Only the manufacturer is able to fix it at that point.

    • @devicemodder
      @devicemodder 11 หลายเดือนก่อน

      ​@jaro6985 what about the android based ones? Cause I have one that runs android 6.0.1, and I'm trying to hack it to install apk files as I want to get mine running DOOM.

  • @Stoner916sac
    @Stoner916sac 2 ปีที่แล้ว

    It looks like one of them at least was an antenna. The other might be too for things like nfc wireless payments. For things like google pay and apple pay and physical cards

  • @nickf3242
    @nickf3242 3 ปีที่แล้ว

    I found this very fascinating. Thank you so much for sharing:)

  • @chloevlog16
    @chloevlog16 6 หลายเดือนก่อน

    thank you for sharing your video. where did you get the screwdriver? thank you

  • @lucafrondoni
    @lucafrondoni 3 ปีที่แล้ว

    Super awesome video! Love it! Looking forward for more content like this :)

  • @awuah
    @awuah ปีที่แล้ว +1

    Is it possible to use the inbuilt printer outside of the device itself. So at least there can be some use for it ??

  • @patricia739
    @patricia739 ปีที่แล้ว

    @MarkFurneaux How do you fix the port if it won’t charge with the wire in the port? It seems loose? It’s this same model. Please help! 🙏🏻
    Thank you. 👍🏻

  • @maciejciurysek4953
    @maciejciurysek4953 ปีที่แล้ว

    Is it possible to convert this terminal into a thermal printer?

  • @BenCampbell41573
    @BenCampbell41573 2 ปีที่แล้ว

    only one question has to be asked can it run doom

  • @saphaswbtw724
    @saphaswbtw724 2 ปีที่แล้ว

    Awsome so interesting

  • @FlCoastalcaster
    @FlCoastalcaster 3 ปีที่แล้ว

    Hi your videos are super helpful, do you have discord ? I would like to contact you on that platform as I have some questions regarding my pc storage

  • @gabest4
    @gabest4 3 ปีที่แล้ว

    I can't see why it should have any secrets, it can read it from the smart card each time there is a payment, the bank can hide it there. edit: or the card could do the communication itself and the terminal just relays the encrypted messages.

  • @INIUOfficial
    @INIUOfficial 3 ปีที่แล้ว

    Hello Mark, we would like to invite you to try our products. Could you please send us an email?