Casino Card Shufflers Found Vulnerable to Hacking

The Deckmate 2 card shuffling machine, commonly found under poker tables, is susceptible to hacking by plugging a small device into the USB port. Hackers can alter the shuffler's code and tamper with the shuffling process without detection. The researchers were able to bypass the security measure and gain control of the shuffler.

Cheating players could exploit the vulnerability by going under the table, plugging a device into the USB port, and manipulating the shuffler's code. Alternatively, the shuffler could be hacked remotely through its internal modem. Once compromised, cheaters could access the shuffler's internal camera, which monitors the cards, and transmit the data to a partner's phone via Bluetooth.

The Deckmate 1 model, which has no external USB port, could also still be compromised by accessing a particular chip inside the case. The passwords for a collection of units bought second-hand could not be changed, making it likely that all Deckmates could be accessed with the same one. The root password, which allows control of the shuffler, was also weak. IOActive’s research concluded that security standards for casino equipment in the United States are out of date.