Insert coin: Hacking arcades for fun

Since we were children we wanted to go to the arcade and play for hours and hours for free. What if we do it now? In this talk I’m gonna show you some vulnerabilities that I discovered in the cashless system of this Argentine company, which is one of the largest in the world, with more than 2,300 installations in 70 countries, from arcades in Brazil, amusement parks in the United Arab Emirates to a famous roller coaster in Las Vegas. We will talk about API security, access control and NFC among other things.