Comments on: Printer malware: print a malicious document, expose your whole LAN http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html Brain candy for Happy Mutants Thu, 20 Jun 2013 05:32:00 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: Stephen Rice http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1309178 Stephen Rice Tue, 03 Jan 2012 19:26:00 +0000 http://boingboing.net/?p=136493#comment-1309178 Yeah, "chilling" and "surprising" are sadly two different things. Yeah, “chilling” and “surprising” are sadly two different things.

]]> By: Ant http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1308915 Ant Tue, 03 Jan 2012 12:12:00 +0000 http://boingboing.net/?p=136493#comment-1308915 How about a virtual machine? How about a virtual machine?

]]> By: patricktr http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1308399 patricktr Mon, 02 Jan 2012 19:37:00 +0000 http://boingboing.net/?p=136493#comment-1308399 I have the same question. Most google searches seem to say that it is just for LaserJet printers, but the BB article suggests that every HP printer is vulnerable. (Most likely, every HP printer is vulnerable, just not necessarily to this particular exploit...) I have the same question. Most google searches seem to say that it is just for LaserJet printers, but the BB article suggests that every HP printer is vulnerable. (Most likely, every HP printer is vulnerable, just not necessarily to this particular exploit…)

]]> By: Lobster http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1308334 Lobster Mon, 02 Jan 2012 17:43:00 +0000 http://boingboing.net/?p=136493#comment-1308334 But I like my dog... :( But I like my dog… :(

]]> By: lexein http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1308126 lexein Mon, 02 Jan 2012 02:40:00 +0000 http://boingboing.net/?p=136493#comment-1308126 Stallman was right. Oh, grumble all you want, but at least admit that. I'm getting a t-shirt that says exactly that. Stallman was right.
Oh, grumble all you want, but at least admit that. I’m getting a t-shirt that says exactly that.

]]> By: simonbrown http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1308100 simonbrown Sun, 01 Jan 2012 22:54:00 +0000 http://boingboing.net/?p=136493#comment-1308100 Try 7zip. Try 7zip.

]]> By: manicbassman http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307771 manicbassman Sat, 31 Dec 2011 19:58:00 +0000 http://boingboing.net/?p=136493#comment-1307771 what's really annoying about these printers and scanners etc. is that they're usually running Linux... you should be able to fix the code yourself but they do not provide the source for the proprietary gubbins on them... oh you can get client side drivers for them, but fixing the firmware is off-limits because of the stuff they've put on them to secretely mark your printouts with date, time and serial numbers and in the case of scanners, to recognise if you're trying to copy a banknote... what’s really annoying about these printers and scanners etc. is that they’re usually running Linux… you should be able to fix the code yourself but they do not provide the source for the proprietary gubbins on them… oh you can get client side drivers for them, but fixing the firmware is off-limits because of the stuff they’ve put on them to secretely mark your printouts with date, time and serial numbers and in the case of scanners, to recognise if you’re trying to copy a banknote…

]]> By: Wooster http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307711 Wooster Sat, 31 Dec 2011 18:27:00 +0000 http://boingboing.net/?p=136493#comment-1307711 Lovely. The most recent update I see for my HP printer is dated October 2009. Lovely. The most recent update I see for my HP printer is dated October 2009.

]]> By: Hanglyman http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307585 Hanglyman Sat, 31 Dec 2011 13:15:00 +0000 http://boingboing.net/?p=136493#comment-1307585 Ah. So they're treating me like a criminal and making my printouts traceable, at MY expense. I don't want to live on this planet anymore. Ah. So they’re treating me like a criminal and making my printouts traceable, at MY expense.

I don’t want to live on this planet anymore.

]]> By: manicbassman http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307568 manicbassman Sat, 31 Dec 2011 12:08:00 +0000 http://boingboing.net/?p=136493#comment-1307568 that's because it needs the yellow ink to print the secret printer ID code on everything it prints... https://en.wikipedia.org/wiki/Laser_printer#Steganographic_anti-counterfeiting_.28.22secret.22.29_marks http://www.instructables.com/id/Yellow-Dots-of-Mystery-Is-Your-Printer-Spying-on-/ that’s because it needs the yellow ink to print the secret printer ID code on everything it prints…

https://en.wikipedia.org/wiki/Laser_printer#Steganographic_anti-counterfeiting_.28.22secret.22.29_marks

http://www.instructables.com/id/Yellow-Dots-of-Mystery-Is-Your-Printer-Spying-on-/

]]> By: Hanglyman http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307552 Hanglyman Sat, 31 Dec 2011 10:31:00 +0000 http://boingboing.net/?p=136493#comment-1307552 I haven't used an HP printer ever since the one I had refused to print a black and white document because it was out of YELLOW ink. Even worse, I'd never printed anything yellow with it. I haven’t used an HP printer ever since the one I had refused to print a black and white document because it was out of YELLOW ink. Even worse, I’d never printed anything yellow with it.

]]> By: hugh crawford http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307482 hugh crawford Sat, 31 Dec 2011 05:32:00 +0000 http://boingboing.net/?p=136493#comment-1307482 This is SO last century I remember all this sort of stuff from back in the late 1980s when people  could embed the code to reset the password on apple laser printers in a postscript file.  Then those people would watch the dumpsters for their new printer. This is SO last century

I remember all this sort of stuff from back in the late 1980s when people  could embed the code to reset the password on apple laser printers in a postscript file.  Then those people would watch the dumpsters for their new printer.

]]> By: MrHarley http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307478 MrHarley Sat, 31 Dec 2011 05:15:00 +0000 http://boingboing.net/?p=136493#comment-1307478 So this is only for some HP LaserJet printers right? Not all HP printers? So this is only for some HP LaserJet printers right? Not all HP printers?

]]> By: Rob Knop http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307293 Rob Knop Sat, 31 Dec 2011 00:07:00 +0000 http://boingboing.net/?p=136493#comment-1307293 Hurm... the exe I downloaded from the HP site is not a zip file.  It's a Windows executable of some sort, but unzip doesn't recognize it. Hurm… the exe I downloaded from the HP site is not a zip file.  It’s a Windows executable of some sort, but unzip doesn’t recognize it.

]]> By: Rob Knop http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307289 Rob Knop Sat, 31 Dec 2011 00:00:00 +0000 http://boingboing.net/?p=136493#comment-1307289 Oh!  Thanks.  I didn't even download the thing, because I saw the "Windows" system requirements. Why can't they just say what you said? Oh!  Thanks.  I didn’t even download the thing, because I saw the “Windows” system requirements.

Why can’t they just say what you said?

]]> By: Cowicide http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307217 Cowicide Fri, 30 Dec 2011 22:36:00 +0000 http://boingboing.net/?p=136493#comment-1307217 <blockquote>Why does this set of attacks surprise anybody?</blockquote> Who's surprised?

Why does this set of attacks surprise anybody?

Who’s surprised?

]]> By: awjt http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307173 awjt Fri, 30 Dec 2011 22:04:00 +0000 http://boingboing.net/?p=136493#comment-1307173 Then it kills your dog.  This is possible now, because the HP printer will spin its wheels to make itself whine like a cat, attracting the dog.  When the dog is nearby, the printer then self-immolates, thus taking out the dog. Then it kills your dog.  This is possible now, because the HP printer will spin its wheels to make itself whine like a cat, attracting the dog.  When the dog is nearby, the printer then self-immolates, thus taking out the dog.

]]> By: awjt http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307172 awjt Fri, 30 Dec 2011 22:01:00 +0000 http://boingboing.net/?p=136493#comment-1307172 I started hating them when the 4000s stopped printing certain pdfs, right when the 4050s came out.  It did get fixed about two months later, but I spent hours troubleshooting this, not knowing which way was up.  It was them all along, just being sleazy. I started hating them when the 4000s stopped printing certain pdfs, right when the 4050s came out.  It did get fixed about two months later, but I spent hours troubleshooting this, not knowing which way was up.  It was them all along, just being sleazy.

]]> By: no0ne http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307153 no0ne Fri, 30 Dec 2011 21:38:00 +0000 http://boingboing.net/?p=136493#comment-1307153 Why does this set of attacks surprise anybody?   Any network device is vulnerable in one fashion or another.    It is why putting your whole house on-line is bad idea.    That having been said, you don't need to hack the printer itself to cause chaos.    Imagine what happens if a computer in finance gets infected and starts printing the payroll or personnel files db  to random printers in the company. Why does this set of attacks surprise anybody?   Any network device is vulnerable in one fashion or another.    It is why putting your whole house on-line is bad idea.   

That having been said, you don’t need to hack the printer itself to cause chaos.    Imagine what happens if a computer in finance gets infected and starts printing the payroll or personnel files db  to random printers in the company.

]]> By: Richard Dagenais http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307135 Richard Dagenais Fri, 30 Dec 2011 21:26:00 +0000 http://boingboing.net/?p=136493#comment-1307135 Way too hard for a Mac user. Way too hard for a Mac user.

]]> By: GeekMan http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307082 GeekMan Fri, 30 Dec 2011 20:30:00 +0000 http://boingboing.net/?p=136493#comment-1307082 It's also just as easy to show up at the door dressed as the company's technology provider and offer them a free printer, an exploit that's been tested by security firms. It all shows that we don't really hack machines so much as we hack people. Scary, but makes good LULz: http://drmcninja.com/archives/comic/20p52/ It’s also just as easy to show up at the door dressed as the company’s technology provider and offer them a free printer, an exploit that’s been tested by security firms. It all shows that we don’t really hack machines so much as we hack people.

Scary, but makes good LULz:

http://drmcninja.com/archives/comic/20p52/

]]> By: Cowicide http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307038 Cowicide Fri, 30 Dec 2011 19:44:00 +0000 http://boingboing.net/?p=136493#comment-1307038 I've always hated HP printers.  Many of them over the years have been a nightmare to share over a network with Macs. I'd like to pile them all into the middle of a football field within a packed stadium, then send the burn-in-a-fire command for all of them to the roar of the cheering crowd screaming, "Burn! You son of a bitches! Burn!!!" I’ve always hated HP printers.  Many of them over the years have been a nightmare to share over a network with Macs.

I’d like to pile them all into the middle of a football field within a packed stadium, then send the burn-in-a-fire command for all of them to the roar of the cheering crowd screaming, “Burn! You son of a bitches! Burn!!!”

]]> By: piowie http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307028 piowie Fri, 30 Dec 2011 19:38:00 +0000 http://boingboing.net/?p=136493#comment-1307028 It's self-extracting ZIP archive. You can use unzip(1) to extract .RFU file. Send this file to the printer like you would do with PS document.  It’s self-extracting ZIP archive. You can use unzip(1) to extract .RFU file. Send this file to the printer like you would do with PS document. 

]]> By: digi_owl http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1307018 digi_owl Fri, 30 Dec 2011 19:26:00 +0000 http://boingboing.net/?p=136493#comment-1307018 Yay for turing complete languages everywhere... Yay for turing complete languages everywhere…

]]> By: Rob Knop http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1306968 Rob Knop Fri, 30 Dec 2011 18:42:00 +0000 http://boingboing.net/?p=136493#comment-1306968 HP does have firmware update software for my printer.  However, the installation instructions indicate it's for Windows only. For those of us who have no Windows in our house (or Mac), can it be done?  Does anybody know if there are general firmware flashing utilities for HP printers out there that aren't dependent on running them from a Windows machine? HP does have firmware update software for my printer.  However, the installation instructions indicate it’s for Windows only.

For those of us who have no Windows in our house (or Mac), can it be done?  Does anybody know if there are general firmware flashing utilities for HP printers out there that aren’t dependent on running them from a Windows machine?

]]> By: semiotix http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1306961 semiotix Fri, 30 Dec 2011 18:37:00 +0000 http://boingboing.net/?p=136493#comment-1306961 If you'd asked me to describe a printer-based virus before seeing this, I'd have imagined something that lived on your hard drive, scanned your network e-mail traffic for certain keywords, and then printed this document on the printer in your Accounts Payable department: <blockquote>INTERNAL MEMORANDUM FROM: [$CEO_NAME] TO: [$ACCOUNTS_PAYABLE_NAME] SUBJ: Urgent billing matter It has come to my attention that we are delinquent in our debt to HRH Josef Abbadiah of the Nigerian Royal Family. I expect you to wire the full $10,000 USD to his Western Union account immediately. And don't even remind me of your incompetence in this matter ever again, or so help me I'll fire you and give your job to that schmuck [$OFFICE_SCHMUCK.ACCTS_PAY] just to spite you.</blockquote>Of course, that'd be the slick commercialized version. There would also be the regular old griefer versions that just made every document end with "P.S. You know what would be fun? Throwing a bucket of water on the server stack! You should totally do that!" If you’d asked me to describe a printer-based virus before seeing this, I’d have imagined something that lived on your hard drive, scanned your network e-mail traffic for certain keywords, and then printed this document on the printer in your Accounts Payable department:

INTERNAL MEMORANDUM
FROM: [$CEO_NAME]
TO: [$ACCOUNTS_PAYABLE_NAME]
SUBJ: Urgent billing matter

It has come to my attention that we are delinquent in our debt to HRH Josef Abbadiah of the Nigerian Royal Family. I expect you to wire the full $10,000 USD to his Western Union account immediately. And don’t even remind me of your incompetence in this matter ever again, or so help me I’ll fire you and give your job to that schmuck [$OFFICE_SCHMUCK.ACCTS_PAY] just to spite you.

Of course, that’d be the slick commercialized version. There would also be the regular old griefer versions that just made every document end with “P.S. You know what would be fun? Throwing a bucket of water on the server stack! You should totally do that!”

]]> By: Robert Baruch http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1306956 Robert Baruch Fri, 30 Dec 2011 18:33:00 +0000 http://boingboing.net/?p=136493#comment-1306956 Jesus. Jesus.

]]> By: Lobster http://boingboing.net/2011/12/30/printer-malware-print-a-malic.html#comment-1306946 Lobster Fri, 30 Dec 2011 18:10:00 +0000 http://boingboing.net/?p=136493#comment-1306946 I wonder how many more years until that old chain letter, where some new insidious virus infects everything from your graphics card to your monitor cable, becomes true. I wonder how many more years until that old chain letter, where some new insidious virus infects everything from your graphics card to your monitor cable, becomes true.

]]>