Ang Cui and Jonathan Voris present firmware modification attacks on networked printers at 28c3, showing how HP printers can be compromised and used as footholds for malware inside sensitive networks.
Why Hacker News points people here: Recommended as a jaw-dropping demonstration of how insecure embedded printer firmware is.
“Your jaw will be scraping along the floor at some of the holes these things have.”HN comment, 2012
“Your jaw will be scraping along the floor at some of the holes these things have.”
Printer hacking talk showing firmware flaws in networked printers.
Full comment
Don't trust your printer! There were a lot of demos of printer hacks at 28c3 and basically I think I might not print anything ever again. A lot of these things have their firmware implemented in postscript. Updating the firmware consists of printing a special document. It's pretty mental tbh. Your jaw will be scraping along the floor at some of the holes these things have. Print Me If You Dare: this video Hacking MFPs: link EDIT: Beaten by 4 hours. Oh well.
Cites itsanatFeb 2013
“The talk clearly mentions that if you can put malware into a printer wouldn't you use it to pawn a network”
Talk clarifies printers cannot actually be set on fire; malware better used on networks.
Full comment
The disclosures before this talk gave rise to this article this video The talk clearly mentions that if you can put malware into a printer wouldn't you use it to pawn a network instead of just setting it on fire - also it isn't possible to set it on fire - they just made that up.
Cites itphelmigAug 2018
“Ang Cui on how to exploit HP printers by sending a modified PDF to them”
Ang Cui on exploiting HP printers via a modified PDF.
Full comment
This reminds me of this [1] talk at 28c3 (Ang Cui on how to exploit HP printers by sending a modified PDF to them). Which lead to one of the most hilarious IT-Sec headlines [2] [1] this video [2] link
