ATM: Is There A Problem Here?: ATM

Showing posts with label ATM. Show all posts

20110430

Problem ID: 8679654052655562677
Entered by: Ben Simo

Do you want to find this file yourself?

No, I want to find some cash.

@Gisch: You want to see a Windows Help dialog box on your ATM, right? #fail

Edit

20110427

Problem ID: 4806611196021740095
Entered by: Ben Simo

An Interruption

After inserting my ATM card and PIN, I select the option (an automatically generated button) to repeat a recent past activity: withdraw $40 from my primary checking account. In the past, selecting this option has resulted in the ATM dispensing cash and returning my card without further interaction.

However, this time, an unexpected pop-up dialog window fills the screen.

Is there a problem here?

The familiar option to quickly repeat my last ATM transaction (withdraw $40 from checking) is interrupted by an unexpected request.
My email address is displayed large enough for others waiting to use the machine to read. (The above dialog nearly fills the large ATM monitor.)
The title of the dialog mentions emailing ATM receipts but the big green button says something about "Favorites".
The dialog doesn't ask a question that is clearly linked to the response buttons. It says to "Press yes", but doesn't clearly state what happens if I press the "No" button.
The dialog text mentions "this Favorite button" but doesn't identify what is "this" or what is a "Favorite button". It doesn't seem to be any of the buttons currently displayed.
The dialog includes "set this Favorite button", "New Favorite", and "update my Favorites" without identifying what these are. Are these all the same thing? If so, why use different phrases to refer to the same thing?
Does emailing a receipt mean I don't get a printed receipt now? What if I want a paper receipt and an email? What if I want the receipt emailed this time but not "always"?

It may seem that pointing these out is nitpicking, but the inconsistencies, ambiguity, lack of privacy, and unexpected appearance of this dialog added confusion to what is typically an quick activity that doesn't require much thought. Few people actually want to use an ATM; most just want to get their money.

And to top it all off, pausing to repeatedly read and understand this dialog triggered a timeout that made the machine beep loudly and drew attention to me and the machine.

Edit

20101209

Problem ID: 4345707149515963351
Entered by: Ben Simo

Script Error

@decarboxy reports: "ATM fail".

Doesn't it make you feel better to know that ATMs are running on Internet Explorer? ;)

Edit

20100529

Problem ID: 9044639371244861277
Entered by: Ben Simo

Denial of Trust

@underexpose: Krungsri ATM #FAIL

Open hex editor programs on ATM displays help instill customer confidence. ;)

Edit

20100328

Problem ID: 1135793819968187623
Entered by: Ben Simo

Please wait while we process your check(s)

@miceyj: soo umm I pulled up to the drive thru ATM & saw this..

Finding an ATM that appears to have taken so long processing the previous user's deposit that they gave up waiting and abandoned the machine gives me reason to not put much trust in the device.

At least it isn't displaying any information about the previous user or their account. However, if this processing ever does complete, will whomever comes across the machine have access to the previous user's account?

Edit

20100223

Problem ID: 7566759496399969167
Entered by: Ben Simo

Apply Properties

@intkhiladi: An ATM with Windows Error Warning! LOL!

Edit

20100216

Problem ID: 586599128031671234
Entered by: Ben Simo

Restriction Policy

"Both cash machines have a windows security error showing on screen #fail" - @aventureben

Instead of improving security, might this security restriction policy error potentially leave a customer's private information, and maybe even funds, open to the next person to come across the machine?

Edit

20100215

Problem ID: 5686178983671800562
Entered by: Ben Simo

Banking coruption

"IN BETRIEB" - Vienna 01/25/10 #bankomat #atm #fail #fb - @minusfortynine

What file is "the file or directory"? I sure hope ATM users don't have permission to run chkdsk on the machine.

Edit

20100210

Problem ID: 3468135692757580008
Entered by: Ben Simo

Sorry, temporarily out of service

"ATM or Windows fail? Both?" - @thisguyritehere

Edit

20100202

Problem ID: 6771020964700412370
Entered by: Ben Simo

ATM steals card

"I just stuck my Card in the ATM and it shut down immediately saying this... With me card still in the machine" - JayGregory202

Edit

20100201

Problem ID: 8976903282808196273
Entered by: Ben Simo

White space

@johanbakken: User interface fail. 90% of the touch screen is unused. The buttons and text are tiny. #ux #fail #flexus

Why make the buttons and text larger when you can fill the screen with such fabulous white space? ;-)

Edit

20100128

Problem ID: 3200681975749775357
Entered by: Ben Simo

NCR Errorlevel 0

“ATM Fail” - @TheZeis

Edit

20100127

Problem ID: 3240713295561052668
Entered by: IsThereAProblemHere.com Reader Submission

Dip your card

Bob Hartman asks:

What if I don't want to get my ATM card wet???

Edit

20100126

Problem ID: 226079885541215143
Entered by: Ben Simo

ATM or public Internet kiosk?

"Hmm... No cash out of this ATM - I do hope that it's at least Windows 2000!" - @MerseyMal

Wonder if I can surf the web from here. ;)

Edit

20100122

Problem ID: 5650850918046594547
Entered by: Ben Simo

We make Banking a Pleasure

kshashi: Dear ICICI, I write code for $$, but I won't fix Runtime Error in Pure Virtual Function Call.

Edit

20100112

Problem ID: 9069110056659713566
Entered by: Ben Simo

Undefined is null or not an object

@scottpatton: an IE script error on an atm? tha makes me feel "safe". NOT!!!!!!

Nothing increases confidence in banking technology like Internet Explorer script errors on ATM machines. ;)

Edit

20100110

Problem ID: 352959768018357973
Entered by: Ben Simo

Lost Delayed Write

“interesting thing abt this msg is... what windows is this atm running?” - @marauderz

Edit

20100109

Problem ID: 8741717758968661302
Entered by: Ben Simo

Alignment

“ATM usability sucks (on some machines). How [do] tall, short, old and less-abled folk cope?” - @andracula

Edit

20100108

Problem ID: 4305008696854632582
Entered by: Ben Simo

ATM Screen Saver

“The מזרחי טפחות ATM is still down and displaying a windows screen saver! #FAIL” - @olivier_amar

Quick, someone insert a card to wake it up.

Edit

20100106

Problem ID: 5205108305825728267
Entered by: Ben Simo

Just read around the error

"Braved a cashpoint with a runtime error. Worked fine, just had try and read around the popup..." - _ralph

Edit

Usability Heuristics

• Visibility of system status Visibility of system status: The system should always keep users informed about what is going on, through appropriate feedback within reasonable time.

• Match between system and the real world Match between system and the real world: The system should speak the users' language, with words, phrases and concepts familiar to the user, rather than system-oriented terms. Follow real-world conventions, making information appear in a natural and logical order.

• User control and freedom User control and freedom: Users often choose system functions by mistake and will need a clearly marked "emergency exit" to leave the unwanted state without having to go through an extended dialogue. Support undo and redo.

• Consistency and standards Consistency and standards: Users should not have to wonder whether different words, situations, or actions mean the same thing. Follow platform conventions.

• Error prevention Error prevention: Even better than good error messages is a careful design which prevents a problem from occurring in the first place. Either eliminate error-prone conditions or check for them and present users with a confirmation option before they commit to the action.

• Recognition rather than recall Recognition rather than recall: Minimize the user's memory load by making objects, actions, and options visible. The user should not have to remember information from one part of the dialogue to another. Instructions for use of the system should be visible or easily retrievable whenever appropriate.

• Flexibility and efficiency of use Flexibility and efficiency of use: Accelerators -- unseen by the novice user -- may often speed up the interaction for the expert user such that the system can cater to both inexperienced and experienced users. Allow users to tailor frequent actions.

• Aesthetic and minimalist design Aesthetic and minimalist design: Dialogues should not contain information which is irrelevant or rarely needed. Every extra unit of information in a dialogue competes with the relevant units of information and diminishes their relative visibility.

• Help users recognize, diagnose, and recover from errors Help users recognize, diagnose, and recover from errors: Error messages should be expressed in plain language (no codes), precisely indicate the problem, and constructively suggest a solution.

• Help and documentation Help and documentation: Even though it is better if the system can be used without documentation, it may be necessary to provide help and documentation. Any such information should be easy to search, focused on the user's task, list concrete steps to be carried out, and not be too large.

Consistency Heuristics

-F amiliar Familiar: The product is not consistent with the pattern of any familiar problem.

E xplainable Explainable: The product is explainable.

W orld World: The product is consistent with the real world.

H istory History: The present version of the product is consistent with past versions of it.

I mage Image: The product is consistent with an image that the organization wants to project.

C omparable Products Comparable Products: The product is consistent with comparable systems.

C laims Claims: The product is consistent with what important people say it’s supposed to be.

U ser Expectations User Expectations: The product is consistent with what users want.

P roduct Product: Each element of the product is consistent with comparable elements in the same system.

P urpose Purpose: The product is consistent with its purposes, both explicit and implicit.

S tatutes Statutes: The product is consistent with applicable laws.

FAILURE Heuristics

F unctional Functional: The error detecting, reporting, and handling functions properly.

A ppropriate Appropriate: Errors are reported at the appropriate time in an appropriate manner.

I mpact Impact: The impact of the failure is communicated to those impacted.

L og Log: The error is appropriately logged; or not logged.

U ser Interface User Interface: The error is reported in the user interface in terms that the user understands.

R ecovery Recovery: The user is informed of what they need to do to recover from the error.

E motions Emotions: The error handling and reporting has a positive influence on user emotions.

Security Vulnerabilities

1. Injection Injection: Injection flaws occur when untrusted data is sent to an interpreter as part of a command. The attacker’s hostile data can trick the interpreter into executing unintended commands or accessing data without authorization.

2. Broken authentication and session management Broken authentication and session management: Application functions related to authentication and session management are often not implemented correctly, allowing attackers to compromise passwords, keys, or session tokens, or to exploit other implementation flaws to assume other users’ identities.

3. Cross-Site Scripting Cross-Site Scripting (XSS): XSS flaws occur whenever an application takes untrusted data and sends it to a web browser without proper validation or escaping. XSS allows attackers to execute scripts in the victim’s browser which can hijack user sessions, deface web sites, or redirect the user to malicious sites.

4. Insecure Direct Object References Insecure Direct Object References: A direct object reference occurs when a developer exposes a reference to an internal implementation object, such as a file, directory, or database key. Without an access control check or other protection, attackers can manipulate these references to gain unauthorized access to data.

5. Security Misconfiguration Security Misconfiguration: Good security requires having a secure configuration defined and deployed for the application, frameworks, application server, web server, database server, and platform. Secure settings should be defined, implemented, and maintained, as defaults are often insecure. Additionally, software should be kept up to date.

6. Sensitive Data Exposure Sensitive Data Exposure: Many web applications do not properly protect sensitive data, such as credit cards, tax IDs, and authentication credentials. Attackers may steal or modify such weakly protected data to conduct credit card fraud, identity theft, or other crimes. Sensitive data deserves extra protection such as encryption at rest or in transit, as well as special precautions when exchanged with the browser.

7. Missing Function Level Access Control Missing Function Level Access Control: Most web applications verify function level access rights before making that functionality visible in the UI. However, applications need to perform the same access control checks on the server when each function is accessed. If requests are not verified, attackers will be able to forge requests in order to access functionality without proper authorization.

8. Cross-Site Request Forgery Cross-Site Request Forgery (CSRF): A CSRF attack forces a logged-on victim’s browser to send a forged HTTP request, including the victim’s session cookie and any other automatically included authentication information, to a vulnerable web application. This allows the attacker to force the victim’s browser to generate requests the vulnerable application thinks are legitimate requests from the victim.

9. Using Components with Known Vulnerabilities Using Components with Known Vulnerabilities: Running software components with known vulnerabilities can compromise the vulnerable components and anything those components can access -- undermining defenses.

10. Unvalidated Redirects and Forwards Unvalidated Redirects and Forwards: Using untrusted data, without validation, to determine the destination of redirects and forwards can enable attackers to redirect victims to phisihing or malware sites.

20110430

20110427

20101209

20100529

20100328

20100223

20100216

20100215

20100210

20100202

20100201

20100128

20100127

20100126

20100122

20100112

20100110

20100109

20100108

20100106

Problem or no problem?

Usability Heuristics

Consistency Heuristics

FAILURE Heuristics

Security Vulnerabilities

Popular

Recent Problems

Recent Comments