Bitcoin Forum

Other => Off-topic => Topic started by: Tugbit on August 31, 2014, 05:02:28 PM



Title: WARNING: MFP printers pose a security hazard!!!
Post by: Tugbit on August 31, 2014, 05:02:28 PM
I found this video: https://www.youtube.com/watch?v=TCKr5WgVVN8 (https://www.youtube.com/watch?v=TCKr5WgVVN8)

The same applies for MFP printers, I checked mine : http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay?javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%253Demr_na-c02738751-1%257CdocLocale%253D%257CcalledBy%253D&javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&ac.admitted=1409502745239.876444892.199480143 (http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay?javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%253Demr_na-c02738751-1%257CdocLocale%253D%257CcalledBy%253D&javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&ac.admitted=1409502745239.876444892.199480143)

I pulled the HD from my mfp and docked it to my computer, I was able to retrieve EVERY DOCUMENT EVER PRINTED, COPIED or FAXED ON THIS MACHINE INCLUDING MY PAPER WALLETS !!!!!!


Title: Re: WARNING: MFP printers pose a security hazard!!!
Post by: 2112 on August 31, 2014, 06:48:36 PM
What is the file system that HP uses in their MF devices nowadays? I do remember that in the past (when disks had about 100MB) their devices used some sort of proprietary file system that was nontrivial to reverse engineer.


Title: Re: WARNING: MFP printers pose a security hazard!!!
Post by: Tugbit on August 31, 2014, 06:59:50 PM
I think it would be unwise to write a tutorial on how to retrieve the data on those disks. I'm not even a computer expert but i managed to find retrieval software on a HP support site...


Title: Re: WARNING: MFP printers pose a security hazard!!!
Post by: shorena on August 31, 2014, 07:15:16 PM
I think it would be unwise to write a tutorial on how to retrieve the data on those disks. I'm not even a computer expert but i managed to find retrieval software on a HP support site...

Ofc its wise. It should be common knowledge that you can not trust these printers. If only a few know about these vulnerabilities the majority will not be aware of the risks and the few knowledgeable can exploit that. Btw you can print an encrypted paperwallet that is useless witout a code that will not be printed. E.g. Mycelium wallet backup uses this to backup the private key(s).


Title: Re: WARNING: MFP printers pose a security hazard!!!
Post by: 2112 on August 31, 2014, 07:42:34 PM
I think it would be unwise to write a tutorial on how to retrieve the data on those disks. I'm not even a computer expert but i managed to find retrieval software on a HP support site...
Then post the link to the software you used. HP site is huge and messy, you'll save us some time.


Title: Re: WARNING: MFP printers pose a security hazard!!!
Post by: Dfrost on September 01, 2014, 06:01:20 AM
Serves you right for trying to print money  ;D


Title: Re: WARNING: MFP printers pose a security hazard!!!
Post by: Gogreen on September 01, 2014, 06:20:49 AM
Serves you right for trying to print money  ;D
lol


Title: Re: WARNING: MFP printers pose a security hazard!!!
Post by: BitCoinNutJob on September 01, 2014, 06:51:36 AM
I found this video: https://www.youtube.com/watch?v=TCKr5WgVVN8 (https://www.youtube.com/watch?v=TCKr5WgVVN8)



Well i wont be selling any used printers anymore thank for this.


Title: Re: WARNING: MFP printers pose a security hazard!!!
Post by: Kluge on September 01, 2014, 07:02:59 AM
Alan from Armory brought this up months ago, incidentally. The biggest concern I'd have is with a company - more likely, individual within company - having its software/drivers phone home (... or worse) with this information. -So everything you scanned in for the AML/KYC crap.... and printing wallets, too, of course.