introduction

A work order had come through at my work several weeks ago stating that one of our public kiosks was prompting for credit card information via the browser whenever a user attempted to use it. This was supposed to be an "internet only" kiosk, which turned out not to be, but was definitely supposed to be a locked down machine.