28c3: Print Me If You Dare

Don't trust your printer! There were a lot of demos of printer hacks at 28c3 and basically I think I might not print anything ever again. A lot of these things have their firmware implemented in postscript. Updating the firmware consists of printing a special document. It's pretty mental tbh. Your jaw will be scraping along the floor at some of the holes these things have. Print Me If You Dare: ▶ this video Hacking MFPs: [link] EDIT: Beaten by 4 hours. Oh well.

in “Printers are spontaneously printing odd "SQL" strings” · View on HN

This reminds me of this [1] talk at 28c3 (Ang Cui on how to exploit HP printers by sending a modified PDF to them). Which lead to one of the most hilarious IT-Sec headlines [2] [1] ▶ this video [2] [link]

in “HP Ink Printers Remote Code Execution” · View on HN

The disclosures before this talk gave rise to this article ▶ this video The talk clearly mentions that if you can put malware into a printer wouldn't you use it to pawn a network instead of just setting it on fire - also it isn't possible to set it on fire - they just made that up.

in “HP printers can be remotely controlled and set on fire, researchers claim” · View on HN