Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Your printer: An open door for hackers?

From misdirected faxes to printer hacking
Security Strategies Alert By M. E. Kabay , Network World , 04/17/2008
Sign up for this newsletter now!

In 2003, a staff member at the Public Health Laboratory of the Ministry of Health and Long Term Care of the Province of Ontario in Canada tried to send a fax to a doctor’s office. (By the way, for U.S. readers, Canada is the large blank pink region north of the border on your maps and which, contrary to popular belief, actually includes people as well as moose and beavers.) Alas, the clerk mistyped a 5 as an 8 in the fax number and inadvertently sent medical records to a local gasoline station. The owner very kindly gave the fax to a doctor who was a regular customer and the doctor reported the breach of the Freedom of Information and Protection of Privacy Act

Everyone knows that fax misdirection is a problem; even properly directed faxes pose a security risk when confidential documents are sent, unprotected, to a nonsecure fax machine that prints everything out whether the proper recipient is ready to receive the documents or not. Now hold those ideas for a moment - and let’s go back to when I was a young man, oh so long ago. (Compare Data Leak Protection products)

In April 1981, I was sent to HP headquarters in Cupertino, Calif., on a six-month assignment to be trained as an HP3000 operating systems internals and performance specialist and also to work on a pioneering computer-based training system I invented for the company. I brought my flute along and met a friendly lab engineer named Dale Morris who played excellent guitar. We had a good time playing duets that summer. I remember that he was working on a new series of HP3000 machines with a vastly increased memory space: 4GB.

I laughed and wondered why anyone could possibly need so much main memory - especially since a 1MB memory board still cost $64,000 at that time (about $200,000 in today’s currency).

Today, I have 2GB of RAM on my main tower PC and Dale Morris is a Distinguished Technologist at HP in Fort Collins, Colo. Recently he told me about an interesting security issue involving printers, and I invited him to tell us about it in this column. It turns out that the old problem of misdirected faxes has a new twist: networked printers are posing the potential for misdirected printouts - including printer hacking.

The remainder of today’s contribution is from Dale and his colleague Gary Lefkowitz, with minor edits.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comments (10)
Login
Forgot your account info?

M. E. Kabay's credibilityBy Anonymous on April 27, 2008, 9:52 pmThe wanna-be-geeks still do NOT understand the real geeks; they probably never will understand; they are too busy hitting the replay button on their remote controlled...

Reply | Read entire comment

I want the 7 minutes of my life backBy Anonymous on April 25, 2008, 7:25 pmUgh, what a waste of my time. What is this, the Inquirer?

Reply | Read entire comment

OuchBy Anonymous on April 21, 2008, 1:35 pmlol i thought i was going to read something interesting instead i get a life story very sweet of you thanks

Reply | Read entire comment

Stop Wasting Our TimeBy Anonymous on April 19, 2008, 5:27 pmMr. Kabay, Will you please dispense with the irrelevant side commentary and get to some technical meat? You're always plugging yourself and other people. 50+% of...

Reply | Read entire comment

M. E. Kabay has No Credibility By Anonymous on April 18, 2008, 4:04 pmMr. M. E. Kabay, Your holier than thou attitude is such a turn off, that from now on when I see your moniker attached to any article, I will gladly forgo reading...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Save The Date!
What They Are Saying

Investment of a Technology should be 'held off' because there hasn't been enough investment in it yet? Is...- Anonymous

Join the Discussion