Money Drop Box With Slot
Fund Box With Slot For Sale
Money Lock Box With Slot
Lockable Money Box With Slot

Metal Donation Box With Locking Top Wall Mount / Countertop

Master Lock Portable Key Safe - Push Button Lock - Weather Resistant, Scratch Resistant - for Door - Overall Size 7.2' x 5.3' x 2.2' - Black, Silver - Metal, Vinyl $43.29 / each Qty. KYODOLED Mini Cash Box with Slot, Portable Metal Money Box with Key Lock,Security Lock Box with Double Layer,Small Safe for Kids 4.9'x 3.7'x 2.3',2 Pieces Red 4.4 out of 5 stars 2,109 $15.99 $ 15.

This metal donation box, also known as a comment holder, is ideal for collecting donations and suggestions. Use this collection bin in a wide range of environments including school functions, church events, and offices. This metal donation box that features a front pocket is ideal for holding suggestion forms or donation envelopes. Each ballot box will keep donations and suggestions safe. This metal donation box that has a locking top with a set of (2) keys is great for collections in public places. These comment suggestion holders can sit on tabletops or hang on walls. The required hardware to mount this metal donation box is included.

This 7-1/8' w x 8-1/2'h metal donation box is easy to transport from event to event. Use this ballot holder to gather feedback from employees or patrons. This versatile metal donation box can also be used to collect entry forms for a contest. The suggestion holder shown here, allows comments to be anonymous, making it more likely for the assessments to be truthful. Each metal donation box that has a textured black finish fits with most environments. This lockable collection bin keeps contents safe. This ballot holder, metal donation box allows any establishment to gather suggestions for improvement or entry forms in a discreet and secure manner.

Please Note: The use of thicker paper materials is recommended for ballots placed in the front pocket. The pocket has approximately a 1/16” gap at the bottom, which thinner materials may slide through.

Blog #01: Security Review

Anson N Rosenthal / February 3, 2015 / 1 Comment / Blog Post #1

I love paying for laundry in my own home, for which I pay rent along with utilities. – No One Ever

Such is the situation I find myself in. Both the washer and dryer in the basement of my off-campus abode are coin-operated, demanding $1.25 and $1, respectively. My main objection to this scheme is that I believe it is a negative-sum game. I find it likely that my inconvenience in having to scavenge quarters outstrips the meager gains, which I’ve estimated at around $40/month, our landlord realizes when he comes around each month to collect his takings. Negative-sum games are evil, and one ought to subvert such a game when coerced into playing.

Threat Model

We should first define the goals of the attacker and what relaxations of these goals are tolerable given their cost and risk. Broadly, the optimal solution here can be said to be the one that minimizes the time and monetary costs of performing the attack as often as needed for the rest of the semester, while also minimizing risk. Risk is a key factor that cannot be ignored as it is in most computer network scenarios, given that gaining such unauthorized access to the machine likely violates the terms of our lease, and any evidence of the attack, successful or not, could likely be traced to the source without much difficulty.

A first approximation to this system consists solely of the attacker and the machine. Attacker wants the machine to execute a wash cycle. For our purposes, the machine has a single physical switch, and no matter who or what flips that switch, the cycle will execute. Access to this switch is mediated by the coin-based authorization protocol and the sturdy physical constructions surrounding these mechanisms, deterring unauthorized access. We can model this attacker’s resources to include physical access to the machine at any time of day for any duration without increased risk. The property manager only comes on a monthly basis, which does not practically restrict the time window for an attack. It is also convenient to assume access to and willingness to spend some modest amount of money equal to the sum to be spent on laundry in the absence of a successful attack, times perhaps a factor of two to account for the thrill of subverting the system. We’ll call this model Phe vs. Machine (PvM).

Money Drop Box With Slot

A second approximation affords the attacker the ability to interact with any external parties, for example the landlord and vendors of relevant machinery. This suggests a set of attacks that still contains those from PvM, with the important addition of a set of attacks predicated on Social Engineering, in which external parties with greater privilege relating to the target system are induced into conferring pieces of that privilege to the attacker.

Authorization: Mechanism and Products

The target machine is a Whirlpool Coin-Operated Top-Load Washer (which is actually no longer listed on the linked product page due to old age) with a Greenwald Industries Coin Chute and Greenwald Industries Money Box. The following is a model for the coin-based authorization process that I’ve pieced together from Greenwald Industries’ website, as well as poking around I’ve done around the target machine.

Coin-based Activation Sequence:

5 quarters are placed in the slots of a Coin Chute.
The chute is pushed forward, and only when all coins are present will they drop from the chute.
On the way down, the coins activate a Coin-Activated Starter, which flips the switch mentioned earlier to initiate the cycle.
The coins drop into the Money Box below the coin chute.

The chute and the starter are both accessible through the Service Door, an opening in the rear of the payment mechanism secured with a tubular lock as illustrated below.

The money box is secured with a traditional pin tumbler lock, with key-lock combinations uniquely identified by a numeric code of length varying by model. Relevent to our second model, according to Greenwald Industries’ policy, replacement money box keys can be ordered if the order lists the proper key code as a form of authentication as the party originally issued the key. A complete listing of key models and their code specifications is provided here.

Attack Analysis

With the process outline above, we can start to enumerate possible attack vectors. There are three different levels of system penetration in which we can operate.

No penetration. All we can manipulate is the coin chute from the outside.
Service door penetration.
Money box penetration.

Coin-Chute Attacks

If we only have access to the coin chute, we can look at the Greenwald Industries product listing for potential exploits (emphasis added):

Thick hardened front plate to protect slides from direct attack. Sliding stainless steel gates protects from tampering and rusting. Stainless steel sizing dogs provide superior protection from direct slide forcing. Hardened steel V notch coin sizing block means greater rejection of slugs, tile and foreign coins.

Immediately, we are presented with the possibility of inducing the mechanism to accept invalid currency as payment, either by brute force or using cheaper replicas. The latter carries less risk of discovery, and there are ample household materials and cheap substitues to use for manufacturing thin metal disks. Bottle caps and washers come to mind here. Another coin-chute attack is the fabled Coin-on-a-String Trick.

All of the attacks listed here carry a high risk of damage to the coin chute mechanism, which is likely not designed to degrade gracefully in the face of objects behaving improperly while interacting with the switches governing currency acceptance. The risk of irreparable damage increases with the force applied, so the potential cost of a failed attempt is on the order of hundreds of dollars, depending on the extent to which components of the washer itself are damaged.

Service Door Attacks

The Service Door is the means by which maintainenence of the system is performed by licensed workers. This means it provides access to the Coin Chute, the Coin-Operated Starter, and the interface between the Coin Chute and Money Box. Two attacks come to mind here, both resulting in a reduced price for executing a cycle. The applica

Metal Money Box With Slot