oooh, the redbox uses full AES encryption!

and they always use the same key which is embedded in the executable right next to the encrypt() and decrypt() functions. well done, guys

correction: they hardcode two separate keys in the two separate places (that I've found so far) which use AES.

this code is enterprise as hell

you need the url for the base client? well you use Redbox.Rental.Services.KioskClientService.KioskClientServiceBaseUrl which is a property that'll ask the ServiceLocator to find an instance of IConfiguration to get the KioskClientServiceBaseUrl object out of it

they wrote their code as a fuckton of C# services that are always HTTP POSTing at each other
HTTP is, as always, the poor man's IPC

they logged the first six digits and last 4 digits of every credit card transaction.

HAVE YOU EVEN HEARD OF PCI?

Edit: this is technically allowed by PCI.

1234 56## #### 7890

can I buy a vowel?

I'm trying to tar up a redbox install and upload it, but each time the tar gets past 50% we find another file with PII in it
You're telling me!

OH HEY BAD NEWS:

when someone opens up the hard drive of a redbox unit, they can pull a file which has a complete list of titles ever rented, and the email addresses of the people who rented them, and where and when

the unit I've got an image for has records going back to at least 2015.

I was able to easily match one of them to a real name

I have 2471 transactions here.

@foone
that you have so _few_ transactions for nearly 10 years on that one drive may explain why redbox has ceased to be, has joined the parrot eternal.

(one rental per day is par for an AirBNB, but unless their costs were really really low that's very bad retail.)

@n1vux @foone rentals cost, what, a dollar? This machine made $2500 in 10 years, hardly seems to recoup its expenze

@greg @n1vux @foone

Rentals were $2.25 *per night*, automatically extended. There were various sales and bundles to start the loan ($1 first day on selected titles, $3.75 2-day rental, etc), but that was the core pricing.

You could also purchase the disc outright from the kiosk, too.

Another factor is you could return disks to any kiosk. Not all kiosks had the same selection, and some were bigger than others, I often went to a bigger kiosk inside Fred Meyer to rent a particular Blu-ray but then returned it to the sad little kiosk outside 7-11 closer to home. So it's possible some kiosks were primarily used as drop boxes while the actual revenue came from high traffic locations dispensing the rentals.