The code that runs Redbox DVD rental machines has been dumped online, and, in the wake of the company’s bankruptcy, a community of tinkerers and reverse engineers are probing the operating system to learn how it works. Naturally, one of the first things people did was make one of the machines run Doom.

As has been detailed in several great articles elsewhere, the end of Redbox has been a clusterfuck, with pharmacies, grocery stores, and other retailers stuck with very large, heavy, abandoned DVD rental kiosks. To many people’s surprise, many of the kiosks remain operational even with the bankruptcy of Redbox’s parent company, which has led some people to “liberate” DVDs from the abandoned kiosks. Reddit is full of posts by people who say they have taken dozens of DVDs from kiosks all over the country.

In a Discord community called “Redbox Tinkering,” a FAQ states “just ask the store manager if you can have it. They will most likely tell you to just take it, but don’t just take it without asking.”

“Use heavy or appliance hand-trucks/dolly to wheel it onto your trailer or out to your truck,” the FAQ says. “It is heavy, so be prepared. I pull it right onto the trailer and strap it down standing up. You can lay them down, but know that most of the discs will be in disarray when you open it. Take everything having to do with Redbox, don’t leave a mess.” The FAQ also contains information about how to disconnect the Redbox from its power supply and how to cut through the bolts that secure the kiosk to concrete with a grinder. It also has information about how to open and disassemble the device at home.

“Unlike most tinkerer’s my main goal isn’t to reverse engineer the Official Software more than I have to. I am mainly interested in carousel movement, movie retrieving/returning, etc. I am using the machine to make my own version of the App to effectively do the same thing the original software does, but with my own spin on it. I mainly want to use it to create a massive DVD/Blu-Ray storage machine with ease of use for retrieving the movies.”

“I work in IT and have a decent sized Homelab and I’ve always been interested in making things work again once they break,” they added.

  • OtterOPA
    link
    fedilink
    English
    arrow-up
    70
    ·
    edit-2
    20 hours ago

    The article also linked to this Mastodon post where someone has been sharing their findings

    https://digipres.club/@foone/113313513964826090

    One potential concern is

    the fact that Redbox machines contain a file that has “a complete list of titles ever rented, and the email addresses of the people who rented them, and where and when.” She also found that the first six and last four digits of credit card information was logged. She said that the records on the particular unit that she was looking at contained 2,471 different transactions and had records on it dating back to 2015.

    • [email protected]@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      17
      arrow-down
      1
      ·
      20 hours ago

      This is definitely a concern, but so long as this data isn’t pooled, we’re mostly fine. Credit card fraud is usually an hour of frustration per person. However, stalking certainly received a fresh new method.