Multifunction Printers — The Forgotten Security Risk?

Feeds

359696 items (189 unread) in 18 feeds

News_Media (44 unread)

• Newsvine (8 unread)
• Propeller
• Reddit (11 unread)
• Reddit - Upcoming (25 unread)

SEM (62 unread)

• WebProNews (62 unread)

Social_Networking (3 unread)

• Mashable (3 unread)

Technology (80 unread)

• Ars Technica
• Boing Boing (7 unread)
• Digg (12 unread)
• Digg - Upcoming (40 unread)
• Engadget (4 unread)
• Gizmodo (14 unread)
• Read/WriteWeb
• Slashdot (3 unread)
• Tech Blog
• TechCrunch
• Techmeme
• Wired Technology

Slashdot

• February 13, 2008
• 

  Multifunction Printers — The Forgotten Security Risk?

  Posted: February 13th, 2008, 11:47pm by ScuttleMonkey

  eweekhickins writes to share an article in eWeek highlighting the forgotten risks that a multifunction printer could possibly offer. Brendan O'Connor first called attention to the vulnerabilities of these new devices at a Black Hat talk in '06 and warns that these are no longer "dumb" machine sitting in the corner and should be treated with their own respective security strategy. "During his Black Hat presentation in 2006, O'Connor picked apart the security model of a Xerox WorkCentre MFP, showing how the device operated more like a low-end server or workstation than a copier or printer--complete with an AMD processor, 256MB of SDRAM and an 80GB hard drive and running Linux, Apache and PostGreSQL. He showed how the authentication on the device's Web interface can be easily bypassed to launch commands to completely hijack a new Xerox WorkCentre machine."

  Read more of this story at Slashdot.