The BBC reports that several Target stores in the US have had their public address systems hacked, resulting in explicit pornographic audio being broadcast across the stores, in some cases for more than 15 minutes at a time.
An email obtained by the BBC, sent by company bosses to Target store managers across the US on Friday afternoon, outlines a weakness in the store's PA system being used to carry out the prank.I've removed a key detail for obvious reasons.
"Non-Target team members are attempting to access the intercom system by calling stores and requesting to be connected to line [xxxx]," it reads. "If connected, callers have control of the intercom until they hang up. We are actively working to limit intercom access to the Guest Services phone only. In the meantime, inform all operators to not connect any calls to line [xxxx]."
So in other words, if you ring up Target and ask to be put through to a certain extension, you're suddenly live on the PA system for as long as you like. Hardly the hack of the century, granted, but a reminder that there are people out there that will find even the most obscure vulnerabilities and exploit them.
I don't condone breaching computer systems but I guess that's one way to draw attention to vulnerabilities. Too bad they didn't pick something more kid-friendly. Like broadcasting that for the next 60 minutes there would be an 80% discount on everything in the store.
(Score: 4, Interesting) by Snotnose on Monday October 19 2015, @01:15PM
In the early 80s, when 300 baud was bleeding edge, someone gave me a phone number and said "call this". Turns out it was the Montgomery Ward distribution system. No login, by connecting you were automatically logged in. You chose your item, gave a delivery address, and presumably voila, you got the item delivered.
I filled out everything for a TV, but chickened out when I got to the final confirm so I don't know if it really worked or not.
For you young ens, Monkey Ward was a large department store much like Sears.
I came. I saw. I forgot why I came.
(Score: 1, Informative) by Anonymous Coward on Monday October 19 2015, @01:45PM
If you did this from your house...yeah. It is a good thing that you chickened out.
(Score: 0) by Anonymous Coward on Monday October 19 2015, @02:17PM
I replaced the tape for the phone systems "on hold" music with twisted sister.
(Score: 0) by Anonymous Coward on Monday October 19 2015, @03:48PM
What's Sears? ;)
(Score: 2) by Hyperturtle on Monday October 19 2015, @04:43PM
Remember service merchandise?
People used to do that and then go and pick up their "order". The people had no real means of checkingg really, until proof of ID was required. People with cajones to do this often had no issues getting the fake ID to display at pick up (and not check out, since it was really a here is your large heavy box of electronics, sir, have a nice day).
Or so it was written on early 80s BBSes!
(Score: 0) by Anonymous Coward on Monday October 19 2015, @10:16PM
yes, it really did work that way ( from someone who used to buy from them often back then, was always cool waiting for your package to come screaming down the roller belt from the 2nd floor )
(Score: 2) by Hyperturtle on Monday October 19 2015, @11:35PM
YES! The roller system provided that suspense and anticipation that we can't really get without staring out a window knowing the delivery guy will arrive soon... But being in the store was more palpable, because unless you wandered around looking at more stuff to buy, all you could do was wait and watch the rollers for something that might be yours to roll into view.