BCOS Monero Village - Hacking a Crypto Payment Gateway
This is a modal window.
The media could not be loaded, either because the server or network failed or because the format is not supported.
Formal Metadata
| Title |
| |
| Title of Series | ||
| Number of Parts | 322 | |
| Author | ||
| License | CC Attribution 3.0 Unported: You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor. | |
| Identifiers | 10.5446/39800 (DOI) | |
| Publisher | ||
| Release Date | ||
| Language |
Content Metadata
| Subject Area | |
| Genre |
DEF CON 26179 / 322
18
27
28
40
130
134
164
173
177
178
184
190
192
202
203
218
219
224
231
233
234
235
237
249
252
255
268
274
287
289
290
295
297
298
299
302
306
309
312
315
316
00:00
Gateway (telecommunications)CryptographyBitHacker (term)Computer hardwareRight angle2 (number)Lecture/Conference
01:25
Stability theoryBitQuicksortCryptographyGateway (telecommunications)WebsiteService (economics)Lecture/ConferenceComputer animation
02:48
Physical systemDatabase transactionIntegrated development environmentCoprocessorQuicksortService (economics)1 (number)Plug-in (computing)Loop (music)Computer animation
04:11
Real numberPhysical systemQuicksortService (economics)Object (grammar)BitInformation securityMeeting/Interview
05:30
Virtual machineForm (programming)Term (mathematics)Pulse (signal processing)Physical systemMotherboardProcess (computing)MathematicsTouchscreenGroup actionCryptographyOperator (mathematics)
06:51
Physical systemBitData miningDemo (music)Virtual machineIntegrated development environmentPoint (geometry)Address spaceSoftware testingCodeWeightKey (cryptography)Computer hardwareMetra potential method
09:35
Physical systemIntegrated development environmentVirtual machineCartesian coordinate systemDifferent (Kate Ryan album)1 (number)Moment (mathematics)Demo (music)QuicksortRadio-frequency identificationBit
11:00
EncryptionAddress spaceQR codeQuicksortVirtual machinePhysical systemMobile appDemo (music)CryptographyComputer animation
Transcript: English(auto-generated)
00:00
we've got Devin up here he's gonna do hacking into a crypto payment gateway pretty exciting stuff I would like to ask everybody just as a reminder when the speaker is speaking there of course we can still have discussions and stuff but let's try to keep it down a little bit if there's a super involved discussion we ask that you take it outside the village out of respect for everybody else that's here so that yeah all you people
00:22
talking it's okay let's bring it down let's bring it to let's bring it down okay we're getting there we'll get in there thank you Devin for coming here let's everyone give him a hand he's gonna present to us hacking a crypto payment gateway cool thank you can you all hear me fine yeah right there well
00:51
I'm Devin I'll be speaking to you it's it's a bit of a catfish title I work at the crypto gateway so it's it's more about hardware hacking and and
01:04
connecting crypto to devices so yeah to get on to it I have notes there they should not be showing sorry give me one second cool so it's so
01:38
basically we're finding that you know Charlie Schramm said Bitcoin is is cash
01:44
with wings and with that I felt that we don't have enough devices in the world that really take crypto it's really it's it's it's currently very much a person to person you know we've we've got crypto gateways like ourselves at globy that is is really trying to enhance where you can use your
02:06
crypto making a little bit more transactional so yeah basically if we look at who globy is it's a cryptocurrency gateway we are really trying to make it a lot easier for for your devices and for you know any
02:24
sort of shops that sort of stuff to be able to take crypto and we're making a easier to to integrate these payment services into any of your your sites devices we we offer we have nine currencies currently that we accept we
02:46
try and stay a lot with the with the the stable currencies we don't necessarily do the ICO coins that sort of stuff we try and stay away from those and then like we've got plugins for everything from Shopify to some of
03:04
the WooCommerce systems that sort of thing yeah then I wanted to say more how do we make transactions more I mean crypto more transactional but basically allowing more services to that sort of self-service devices to to
03:25
adopt these transactions and basically allowing people to use their favorite coins particularly like Monero you know otherwise like Bitcoin and and ultimately is to push more towards a more business-to-business transactions
03:44
we find especially in the current environment that we have a lot of businesses that said like that's great we would love to take it but I'll you know who we're paying doesn't want to take it so like if we could close that loop we would have more transactions I reckon with that so yeah why a payment
04:08
processor ultimately when I joined globally I thought it was like a bit of a we've got all of these technologies that are decentralized and then we're
04:20
sort of centralizing it again and but it really really helps businesses and and any sort of real-world objects to go through a service that will help you with your nodes helps you with all the technical requirements that running a payment system requires helps you with a lot of the security that
04:45
sort of stuff as well and ultimately reduces your risk then yeah basically so to get to what I I've actually come here to talk about in
05:17
terms of of making devices take payments sorry my first talk ever so
05:30
you know what I what I looked at doing was was was taking devices particularly like say a coin acceptors and was to sort of replicate what you're doing with this in terms of these
05:44
these coin actions that that happen you you're putting in a coin and it's obviously the machine understands the pulses that are coming out of that but it doesn't necessarily understand any other form of system you would have to either change the whole motherboard change the whole
06:03
system to be able to take these new technologies I felt that like if we could replicate a lot of these acceptors we could then just ultimately put like a raspberry pi screen with with a whole payment system on there that would then take your payments you could
06:22
jimmy that into almost any machine without having to do any soldering any other work that ultimately would put a lot of hours into to changing these machines so I went through that process of of of changing that coin acceptor to or replicating that coin acceptor and basically
06:44
with that I have the system it's it's operational that I wasn't able to bring the the full arcade here that you can pay with crypto and then it just ultimately looks like a coin has been inserted in the machine that that makes makes it changing all of these devices much simpler than
07:07
than having to to build in a new system I was going to run through basically uh what it entailed to to set up like a point of sales um but oh man I actually um
07:28
I'm on the wrong machine here okay yeah I'm sorry uh I was gonna do a whole demo
07:42
I actually realized that I'm on somebody else's machine mine as you can see there's a bit of um glitches with the system so basically if you were going to sign up for an account and you want to test this stuff out I mean you could do it right here you'd go to test.globey.com you'd sign up for a test account um you would need your bitcoin or xmm like a
08:05
an address for your settlements through the system and then basically um yeah like uh bdc and and manero their um their gooeys do quite well with uh with test nets um so it's it's
08:23
quite quick to change over um I've listed a couple of faucets um to get these test coins that you want to use on the test system um found in in environments before it's it's quite hard to to come come by uh test coins to to uh yeah test out the system um the codes up on
08:45
it's it's listed as pi pay um I've I've basically we've got the whole system there it's actually a fully working point of sales that can be modified to to working on the raspberry pi and other devices um if you download that you run it I was going to show
09:04
a demo of that uh with the payment um that basically is is a full system that you could you could put into any hardware um that that runs uh can run the mpm um basically node um
09:22
yeah and then on our system you just um yeah you just generate an api key really simple stuff just put it into the system and it will run um yeah and then um
09:41
further from this with me not having this working demo um I'd like to to have more vending machines that I've set up with different coin acceptors that sort of stuff that would take different uh would change over different applicators and um we could see it in in a working
10:00
in a much better environment of uh um so yeah I'd like to to to change up a couple of vending machines from um paying uh your parking to you know just the crane machines like the
10:27
the similar one to what I've got at home and um with that as well uh refunding is is a bit of an issue um I haven't really put in a system just yet that if you've paid you can't um you can't use the machine um I have no way of refunding at the moment
10:47
uh that that would be something that I would I would want to add and then um yeah as I said more acceptors you know we've got the the note readers um you've got the the different ones that are um you know the rfids that sort of stuff is is trying to replicate all of them
11:05
so that it's really simple to change over to to take in crypto on any machine that's that would be the ultimate goal yeah and then um ultimately yeah if any of you guys want to speak to me I'll be happy to do the demo uh to anybody who asks I'd have to just put it
11:26
up on the machine and put it up on the desk um and then I can talk through those um yeah without that that working demo it really uh it shortens this talk drastically um yeah ultimately that is
11:42
that is it from me um on on yeah on changing machines to to take crypto um yeah cool sorry it's so short um I will be at the the back there or yeah yeah yeah go for it Paul
12:18
um I particularly if um I I've looked at at ways of either um having having the the payment
12:29
that it requires that you you put in that that refund address when you when you pay for it um that that's a possibility otherwise I'd have to embed like a camera um into the system either
12:43
with a raspberry pi that sort of stuff and that could read the the qr code and um get the address and and pay back yeah um yeah yes I'll happily show you that at the back um what actually
13:06
happened is my machine wouldn't connect to the to the um the system here and I'm on someone else's machine it's it doesn't have all the tools and and whatnot that I I do require to show that yeah cool anyone else but sweet sorry thanks for uh for coming to listen