// Safeway's Not So Safe
//
// by Mr. Squish
//
// http://www.oldskoolphreak.com

I wanted to let everybody know that there is a serious lack of security at
the Safeway credit card account access computers (seen at the front of
Safeways).  If you don't know what a Safeway is, it's a grocery store chain
that is very big in the northwest.  Anyway, after poking around I had full
access to the system.  It was running Windows 2000 and nothing had been
turned off after rebooting and just goofing around (it just starts up an
Internet Explorer window with some website - Safeway's credit card access
website - sorry don't know the name right now).

Now there are a number of things that I think are really bad about this:
Somoene could potentialy (and easily) set up a keylogger/trojan/crafty hack
of the locally cached website and set it to submit the account info to an
alternate location, etc.  In case you want to investigate that you might
want to know that (as I've seen it) the employees are totally clueless.  No
one cared while I played with their system for over an hour and a half!
It's located by the door next to a Safeway ATM.  Anyway have phun!



// More Safeway Phun
//
// by Chaney


All stores:

cc####.safeway.com
dd####.safeway.com
i####.safeway.com

Where, #### = store number.