/challenges/the-tellers-mistake
Reward
Difficulty
Solves
Rating
A regional bank recently discovered an old ATM diagnostic utility still deployed on several maintenance terminals.
Before displaying its internal diagnostics, the program asks technicians to enter a maintenance PIN. The developers were confident the authentication couldn't be bypassed.
Security auditors weren't so sure.
Can you convince the program you're authenticated without knowing the PIN?
The check exists — it just doesn't check enough.
Sign in to join the discussion.
No comments yet. Be the first.