28c3: Print Me If You Dare
28c31 HN recommender · recommended in 1 month, 2012–2018
talk · advanced · 2012–2018 on HN
Ang Cui and Jonathan Voris present firmware modification attacks on networked printers at 28c3, showing how HP printers can be compromised and used as footholds for malware inside sensitive networks.
Recommended as a jaw-dropping demonstration of how insecure embedded printer firmware is.
Up next
4 mo on HNKeep your goals to yourself | Derek Sivers
TED
2 HN recommender · 2010–2023
8 mo on HNTech Talk: Linus Torvalds on git
Google
9 HN recommender · 2007–2023
7 mo on HNBlackHat USA 2011: SSL And The Future Of Authenticity
Christiaan008
9 HN recommender · 2011–2017
3 mo on HNPlaying to Lose: AI and "Civilization" (Soren Johnson)
Google TechTalks
2 HN recommender · 2011–2026
11 mo on HNThe Loving Trap
Ben Woodhams
15 HN recommender · 2012–2026
7 mo on HN27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
basti0007
8 HN recommender · 2011–2024
4 mo on HNHans Rosling: Debunking third-world myths with the best stats you've ever seen
TED
4 HN recommender · 2011–2017
2 mo on HNSuper Mario World Credits Warp Explained
Frieze
2 HN recommender · 2015–2025
11 mo on HNBehind the Scenes of iOS Security
Black Hat
9 HN recommender · 2016–2026
11 mo on HNWhy Electronic Voting Is Still A Bad Idea
Tom Scott
11 HN recommender · 2020–2026
10 mo on HNUSENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
10 HN recommender · 2018–2026
10 mo on HNDefcon 18 Changing threats to privacy Moxie Marlinspike Part
killab66661
6 HN recommender · 2012–2019
3 comments from Hacker News
Don't trust your printer! There were a lot of demos of printer hacks at 28c3 and basically I think I might not print anything ever again. A lot of these things have their firmware implemented in postscript. Updating the firmware consists of printing a special document. It's pretty mental tbh. Your jaw will be scraping along the floor at some of the holes these things have. Print Me If You Dare: ▶ this video Hacking MFPs: link EDIT: Beaten by 4 hours. Oh well.
This reminds me of this [1] talk at 28c3 (Ang Cui on how to exploit HP printers by sending a modified PDF to them). Which lead to one of the most hilarious IT-Sec headlines [2] [1] ▶ this video [2] link
The disclosures before this talk gave rise to this article ▶ this video The talk clearly mentions that if you can put malware into a printer wouldn't you use it to pawn a network instead of just setting it on fire - also it isn't possible to set it on fire - they just made that up.