{"guid":"f650773d-d9df-4050-814c-a9505c439b30","title":"Mit dem Getränkeautomaten in die Cloud","subtitle":"Über die (Un-)Sicherheit eines Bezahlsystems","slug":"Camp2019-10201-mit_dem_getrankeautomaten_in_die_cloud","link":"https://fahrplan.events.ccc.de/camp/2019/Fahrplan/events/10201.html","description":"Ob an Getränkeautomaten oder in der Kantine: Oft wird in Universitäten oder großen Firmen mit einem internen Ausweis bezahlt.\nWir haben eines dieser internen Bezahlsysteme einmal genauer in Bezug auf seine IT-Sicherheit untersucht und dabei überraschend viele Schwachstellen festgestellt.\n\nInterne, bargeldlose Bezahlsysteme können Transaktionen über einen Cloud-Dienst abwickeln.\nDie Informationssicherheit ist bei diesen Systemen von großer Bedeutung, um das Geld der Kunden und auch das Geld des Betreibers, der für die Abwicklung der Zahlung an die jeweiligen Abteilungen oder Dienstleistern die Verantwortung trägt, zu schützen.\nIn diesem Talk soll die Sicherheit eines dieser Cloud-basierten Systeme genauer beleuchtet und dabei ein Großteil seiner Sicherheitsarchitektur auseinandergenommen werden.","original_language":"deu","persons":["Janis Streib"],"tags":["camp19","10201","Security"],"view_count":1575,"promoted":false,"date":"2019-08-23T00:00:00.000+02:00","release_date":"2019-08-24T02:00:00.000+02:00","updated_at":"2026-04-04T23:15:06.653+02:00","length":1850,"duration":1850,"thumb_url":"https://static.media.ccc.de/media/conferences/camp2019/10201-hd.jpg","poster_url":"https://static.media.ccc.de/media/conferences/camp2019/10201-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/conferences/camp2019/10201-hd.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/conferences/camp2019/10201-hd.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/Camp2019-10201-mit_dem_getrankeautomaten_in_die_cloud","url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_title":"Chaos Communication Camp 2019","conference_url":"https://api.media.ccc.de/public/conferences/camp2019","related":[{"event_id":7358,"event_guid":"b69c19ce-7c89-4afd-9396-ea664f80dba8 ","weight":43},{"event_id":7359,"event_guid":"a0a0fcfe-b7fb-46e3-84b6-97a5406016b4","weight":40},{"event_id":7361,"event_guid":"977957d7-ef42-4ea0-8380-b9a48bd583f0","weight":37},{"event_id":7367,"event_guid":"afbc3b87-4156-470d-9385-c18e7b29f97b","weight":55},{"event_id":7368,"event_guid":"e1b56229-fb1e-480c-9691-c137ec11ee51","weight":75},{"event_id":7373,"event_guid":"045e8a2c-63d0-4335-886e-cbd6323afc73","weight":37},{"event_id":7375,"event_guid":"d8db148c-39e4-4f1e-af23-a26a477c82ee","weight":50},{"event_id":7381,"event_guid":"e988c76b-3a47-46de-a2c7-77c49a5e731b","weight":70},{"event_id":7383,"event_guid":"acc3dd01-bec3-444f-80c1-5dd37f522aa4","weight":70},{"event_id":7384,"event_guid":"8e743367-04a1-4232-ab03-a54fc210e548","weight":152},{"event_id":7385,"event_guid":"df91b683-2f32-4400-8043-b1d88aa0b454","weight":80},{"event_id":7389,"event_guid":"ed4b6c75-14f4-49fe-a11e-3762bd6b54e3","weight":130},{"event_id":7395,"event_guid":"95a8ea24-a2dd-479f-86fd-6e96ce66a47e","weight":90},{"event_id":7396,"event_guid":"ffe2c816-e1d4-4457-8a2d-6c953cc3de17","weight":16},{"event_id":7417,"event_guid":"84c25f65-998a-43a8-bd32-2fe91fe42ff7","weight":114},{"event_id":7437,"event_guid":"49498e74-3b88-599b-9fb5-f28663b3c8bc","weight":51},{"event_id":7438,"event_guid":"d6b8d105-2540-5f33-955a-f73ae31831ca","weight":63},{"event_id":7453,"event_guid":"ffa61ddc-7493-5c90-8976-ca25cf368bd0","weight":60},{"event_id":7459,"event_guid":"4263620e-f36f-4408-b702-01481e0efbd7","weight":62}],"recordings":[{"size":175,"length":1850,"mime_type":"video/mp4","language":"deu","filename":"camp19-10201-deu-Mit_dem_Getraenkeautomaten_in_die_Cloud.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-08-24T00:18:51.647+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/h264-hd/camp19-10201-deu-Mit_dem_Getraenkeautomaten_in_die_Cloud.mp4","url":"https://api.media.ccc.de/public/recordings/37445","event_url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":176,"length":1850,"mime_type":"video/mp4","language":"eng","filename":"camp19-10201-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-08-24T00:18:58.367+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/h264-hd/camp19-10201-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud.mp4","url":"https://api.media.ccc.de/public/recordings/37446","event_url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":322,"length":1850,"mime_type":"video/mp4","language":"deu-eng","filename":"camp19-10201-deu-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-08-24T00:19:16.146+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/h264-hd/camp19-10201-deu-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud_hd.mp4","url":"https://api.media.ccc.de/public/recordings/37447","event_url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":16,"length":1839,"mime_type":"audio/opus","language":"deu","filename":"camp19-10201-deu-Mit_dem_Getraenkeautomaten_in_die_Cloud_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2019-08-24T00:21:34.358+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/opus/camp19-10201-deu-Mit_dem_Getraenkeautomaten_in_die_Cloud_opus.opus","url":"https://api.media.ccc.de/public/recordings/37452","event_url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":28,"length":1839,"mime_type":"audio/mpeg","language":"deu","filename":"camp19-10201-deu-Mit_dem_Getraenkeautomaten_in_die_Cloud_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2019-08-24T00:22:04.670+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/mp3/camp19-10201-deu-Mit_dem_Getraenkeautomaten_in_die_Cloud_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/37453","event_url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":98,"length":1850,"mime_type":"video/mp4","language":"deu-eng","filename":"camp19-10201-deu-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2019-08-24T00:23:36.933+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/h264-sd/camp19-10201-deu-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud_sd.mp4","url":"https://api.media.ccc.de/public/recordings/37454","event_url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":128,"length":1850,"mime_type":"video/webm","language":"deu-eng","filename":"camp19-10201-deu-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2019-08-24T00:32:26.446+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/webm-sd/camp19-10201-deu-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/37457","event_url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"},{"size":436,"length":1850,"mime_type":"video/webm","language":"deu-eng","filename":"camp19-10201-deu-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2019-08-24T00:50:46.224+02:00","recording_url":"https://cdn.media.ccc.de/events/camp2019/webm-hd/camp19-10201-deu-eng-Mit_dem_Getraenkeautomaten_in_die_Cloud_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/37462","event_url":"https://api.media.ccc.de/public/events/f650773d-d9df-4050-814c-a9505c439b30","conference_url":"https://api.media.ccc.de/public/conferences/camp2019"}]}