Flutterby™! : same key across all terminals

European Credit Card Terminals Are Plagued with Serious Vulnerabilities:

The researchers were able to do this by extracting the key used for signing messages from their test terminals. But it turns out every single terminal provided by a payment processor uses the same key.

Dafuq? And then it gets worse!