Reply to post:

But surely that would be all routed through a secure proxy - what seems to have happened here is that the POS system terminal has carte blanche to connect to the internet and to connect to any site that it wants....didn't ANYONE even consider that this was a very stupid thing to do?