I beg to differ, security by obscurity only gives a false sense of security and hats have all kind of colors.
Serge Humpich[1] worked with decommissioned ATMs, found and expose a vulnerability allow to withdraw cash with a card not linked to a bank account. Of course instead of listening and fixing the issue the banks tricked him and sued and gave rise to the yescard which forced the banks to patch up their security and replace ATMs. But hey, banks can't do the right choice all the time, can they?
Comments
I beg to differ, security by obscurity only gives a false sense of security and hats have all kind of colors.
Serge Humpich[1] worked with decommissioned ATMs, found and expose a vulnerability allow to withdraw cash with a card not linked to a bank account. Of course instead of listening and fixing the issue the banks tricked him and sued and gave rise to the yescard which forced the banks to patch up their security and replace ATMs. But hey, banks can't do the right choice all the time, can they?
[1]: https://www.everything2.com/title/Serge+Humpich