theurge.wordpress.com

October 22, 2007

Smartcard Laundry Hack

Filed under: Uncategorized — theurge @ 1:23 am

I’ve been on the fence about this, but I finally decided I would share a smartcard exploit I found awhile back…

My apartment complex uses a smartcard system for it’s washers and dryers. We use a “transaction station” to recharge the cards. Being impatient one day adding credits, by chance I stumbled on a way to add “free” credits on to my smartcard.

I did some research, and found out the “transaction stations” are made by a company called Greenwald Industries. (there are no markings or stickers on the station, so it took me awhile to find the manufacturer )

Here’s what the transaction station looks like in case you have one in your building/dorm/etc:

cts

http://tinyurl.com/39cjfo

Here’s what you do:

1. Put your smartcard into the machine like you normally do.
2. Insert some money into the dollar changer.
3. Now immediately as you inserted the first bill, take a second bill (doesn’t matter what denomination) and try to feed it into the changer while the station is still processing the first bill. Make an effort to really try and insert the 2nd bill. Don’t remove the 2nd bill until the next step occurs.
4. While you are inserting the 2nd bill the display should be showing “adding credits” on the screen but it should eventually say “bill error” and spit the first bill you put in, out.
5. As soon as it spits the first bill out, immediately pull the smartcard out of the machine.

When you put the card back into the station to check your balance, you will find that, even though the station got confused by you trying to stick another bill in while it was processing the first bill, it still manages to add the credits to your card.

Obviously since you pull the card out of the machine before it is able to reverse the credits, the credits remain on the card.

I don’t know how widespread these stations are, but I’d figure I’d share this exploit anyways. Enjoy!

-TheUrge

About these ads

7 Comments »

  1. I have the same machine in my comlex too however it does not have a bill feeder. You insert the debit/credit card. I will try this though. However I think they lock your card in so that you cant pull it out. Thanks for sharing though

    Comment by Joe — June 22, 2008 @ 3:33 pm

  2. Good job digging up the manufacturer for these transaction stations. Thanks for sharing.

    Comment by Motoma — June 30, 2008 @ 7:35 pm

  3. hey, i have this exact machine and system at my apt. i have tried this several times and it has yet to work. any suggestions?

    Comment by hill — February 27, 2009 @ 6:46 am

  4. I have a Greenwald Industries transaction station in my apartment complex, however, when you stick the card in, the machine holds it there. Therefore, when the words “bill error” show up, you can’t pull the card out. I tried your method today and ended up putting $1 on my card, which isn’t bad but it’s not exactly good. I think I might try to tape the card with about 2-3 inches hanging off of it so that I can try and force-pull the card out when “bill error” shows up again.

    Comment by Jon — July 22, 2009 @ 5:38 pm

    • Weird. I have since moved to a differant complex (with a washer/dryer in the unit :D), but I remember when doing this trick that it would not lock the card. You could pull the card out freely without any sort of difficulty.

      I don’t know if this is some sort of option set in the machine itsself, but that’s how ours was setup.

      Comment by theurge — July 22, 2009 @ 7:04 pm

      • The machine I have here looks a little different than the one in your picture. Anyways, I added the tape and was able to pull the card out when it said “bill error” except now my card is unreadable and I just lost $10 for laundry :( !!! I tried inserting it back into the transaction machine with a “error validating ID”. I also tried letting the washer/dryer machines read it but got a “card bad” notice. Welp, I wonder if I can talk to anyone here about getting my money back :/

        Let that be a lesson to you all: do things the honest way. Hahaha.

        Comment by Jon — July 23, 2009 @ 2:51 am

  5. THIS IS GONNA BLOW YOUR MIND BUT I HAVE GREENWALD INDUSTRIES CARD LOADER ON MY WASHER AND DRYER THIS DON’T WORK ON ALL WASHERS AND DRYERS BUT OK, WASH FOR FREE?????? HAH TRUE… Unplug the WASHER and plug it back in washer should start automatically.
    DRY FOR 2$ ALL NIGHT: (this is good but make sure if it works for you to grab a black permanent marker and mark your card while its in slot and color all the white that shows on the card, oh and dont wash and dry during hours of operation because we all know the cleaning ladies are very nosy)
    OK so you put your card in the slot for dryer takes off 1.50(normally) says thank you please remove card well start the dryer and shove the card back in, it will deduct .50 cents for more dryer time don’t remove the card try and hide it as best as u can, next load don’t touch the card just open and start like a normal dry cycle.(AGAIN DOSNT WORK ON ALL MODELS *MOSTLY WHITE MAYTAG*

    Comment by Anonymous — September 10, 2010 @ 5:30 pm


RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

The WordPress Classic Theme. Blog at WordPress.com.

Follow

Get every new post delivered to your Inbox.

%d bloggers like this: