Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Mon 28 Jul 2014, 06:56
All times are UTC - 4
 Forum index » Off-Topic Area » Security
HP Officejet All-in-One: An unlikely spy tool
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [2 Posts]  
Author Message
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 10936
Location: Arizona USA

PostPosted: Tue 07 Sep 2010, 23:55    Post subject:  HP Officejet All-in-One: An unlikely spy tool  

http://blogs.techrepublic.com.com/security/?p=4384&tag=nl.e036
Quote:
As Officejet web pages are showing up on the Internet. Mr. Sutton came up with a clever way to find them. Since the web servers are facing the Internet, all that’s required is to run a search query for common phrases used on these particular web pages............

HP Officejet products by default are not password protected. So a vast majority of the devices I found were wide open. I could change any of the settings that I wanted to. Then if I wanted to be nasty, I could create an admin password, locking the respective users out of their own Officejet printer/scanner..............

The newer versions of HP Officejet products incorporate a feature called Webscan. This gives remote users the ability to initiate a scan and retrieve the scanned image........

As everything is web based, an enterprising but disgruntled employee could simply write a script to regularly run the scanner in the hopes of capturing an abandoned document. The URL used to send the web scanned documents to a remote browser is also completely predictable......

Actually I think most modern scanners and copiers save everything on an internal hard disk drive. If you could gain access to that drive through the browser, you'd have a copy of every document that had been put through the scanner.

What I want to know is, why did HP put the remote scan feature in? It makes no sense to me. Have you ever wished you could initiate a scan from a remote location? You'd have to remember to leave a document in the scanner. Why wouldn't you just go ahead and scan it and send the file to wherever, or put it on a flash drive and take it with you?
Back to top
View user's profile Send private message 
PaulBx1

Joined: 16 Jun 2006
Posts: 2308
Location: Wyoming, USA

PostPosted: Wed 15 Sep 2010, 11:25    Post subject:  

Quote:
What I want to know is, why did HP put the remote scan feature in?


Mindless, creeping featuritis? Or maybe a request from the support group so they can remotely check the results of a scan that a customer is having problems with? Or maybe a bribe from the NSA?

We will never know.
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [2 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0433s ][ Queries: 12 (0.0036s) ][ GZIP on ]