Am I crazy in thinking that the shop I was in that has CentOS 3 running their self checkouts should have a more up to date and currently supported OS? These are brand new self checkouts (the shop has had them for about a year now, but you get my point.)
It’s a genuine question. Am I wrong in thinking that using this OS on a self checkout is a terrible idea? (FWIW this shop is an international retailer)
I have no stake in the shop or anything. I just happened to be there when they had to reboot a self checkout and I noticed the OS version as I was going by.
I'm sure it's not directly connected with an externally accessible IP. It's either communicating with a backoffice server, or on a secure VPN tunnel to the rest of the corporate network.
The point is that it shouldn't be accessible, but a vulnerability would make it accessible. Its connected to the internet. Its a risk.