Too Much Free Time

Too Much Free Time

by Mike Masnick




Hackers Watching Your Photocopying Activities

from the odd dept

Not having been in the market for a photocopying machine in quite some time, I wasn't aware that there were network connected copying machines, but it's not at all surprising. Still, that doesn't necessarily explain why anyone would ever reveal the information necessary to log into such machines on a public website where Google would snap it up allowing hackers to sit back and watch what you're photocopying. Besides, isn't this a bit of a misnomer? Photocopying shouldn't have to have anything to do with the network. It's scanning and printing that would make sense for a network -- but perhaps that's all just semantics. Still, it seems like a fairly specific hack to go searching for accidentally revealed photocopier login information and to sit back hoping someone photocopies something important.

8 Comments | Leave a Comment..

 
 

Reader Comments

(Flattened / Threaded)

    Sep 24th, 2004 @ 11:32am
  • No Subject Given

    by Anonymous Coward

    Think Law Firms and Financial Institutions. Very tasty material for the right people and these firms generally have to leave a complete paper trail of their activity or in the case of law firms, bill you for every copy made.

    (reply to this comment) (link to this comment)

    • Sep 24th, 2004 @ 11:49am
    • Re: No Subject Given

      So why are all those copies accessible over the internet? They shouldn't be. If they were just for photocopies, then let them be photocopied. If they were for scanning, then clearly more security should have been put in place.

      (reply to this comment) (link to this comment)

    Sep 24th, 2004 @ 11:48am
  • Networked printers and photocopiers

    I'm guessing here, but I suspect what they are talking about are these "new" (we've had them for several years now, I think Xerox makes them) copy machines that double as printers. Instead of two machines you only need one, at least theoretically saving you money. To function as printers they obviously need to be connected to the network.

    What I don't understand is how they can see what you're copying, as I assume nothing is processed via a network.

    In any case, that they can see what you're copying might be the least of your worries, as when they get so far they must also have access to your network...

    (reply to this comment) (link to this comment)

    • Sep 24th, 2004 @ 12:17pm
    • Re: Networked printers and photocopiers

      by Paul

      The newer machines scan and store items in their memory in order to print. In fact, the one we have in our office can hold items in a personal box until I walk over and print it.

      This machine also holds a digital image of all items sent to it and scanned (when you copy items). If that machine is connected to a network and not behind a firewall, it is most certainly open to anyone who can figure out its network address and if they know the right commands, pull down the entire memory of the machine.

      The manufacturers of these machines need to make sure people are aware of this. From there, it is the organization/person's responsibility.

      (reply to this comment) (link to this comment)

    Sep 24th, 2004 @ 12:33pm
  • No Subject Given

    by Anonymous Coward

    Networked copiers allow you to print to them from your PC and use the advanced features they offer such as collating, stapling, etc. Pretty handy. I use it all the time at work.

    Exposed copiers will probably start getting copy spam.

    (reply to this comment) (link to this comment)

  • Sep 24th, 2004 @ 12:38pm
  • No Subject Given

    by eeyore

    some network copiers allow you to scan a document and send it back to you PC as an image file.

    (reply to this comment) (link to this comment)

  • Sep 27th, 2004 @ 12:59pm
  • No Subject Given

    by Anonymous Coward

    "Photocopying shouldn't have to have anything to do with the network"
    In the UK there are tax breaks for computer equipmment. Photocopiers that connect to computers can therefore be classed as computer equipment and therefore save companies lotsa dosh!

    (reply to this comment) (link to this comment)

  • Sep 27th, 2004 @ 1:17pm
  • No Subject Given

    by Anonymous Coward

    bugtraq message about xerox copier/printer default configuration and it's complete lack of security

    (reply to this comment) (link to this comment)

Add Your Comment

Have a Techdirt Account? Sign in now.
Get Techdirt’s Daily Email
Plain Text HTML
Save me a cookie
  • Plain Text: A CRLF will be replaced by break <br> tag, all other allowable HTML is intact
  • HTML: No formatting of any kind is done without explicitly being written in
  • Allowed HTML Tags: <b> <i> <p> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Close
Have a Techdirt Account? Sign in now.
Get Techdirt’s Daily Email
Plain Text HTML Save me a cookie

Search Techdirt
And now, a word from our Sponsors..



Subscribe to Techdirt's Daily Email Newsletter

Techdirt's Daily Email Newsletter

Related Stories
Close
E-mail It