Credit card terminals have used same password since 1990s, claim researchers

While retailers battle breaches that have resulted in tens of millions of credit card numbers stolen, word comes from the RSA Conference in San Francisco that a major vendor of payment terminals has been shipping devices for over two decades with the same default password.

The vendor wasn’t named by the researchers, David Byrne and Charles Henderson, but they did disclose the password: 166816.

A Google search reveals that’s the default password for several models of credit card terminal sold by Verifone, a Silicon Valley-based vendor that says it connects 27 million payment devices and has operations in 150 countries.

Verifone didn’t immediately comment on the claim.

To read this article in full or to leave a comment, please click here

Read more: Credit card terminals have used same password since 1990s, claim researchers

Story added 23. April 2015, content source with full text you can find at link above.