3 ms·
> So you're ok with a compromised printer leaking your medical records? No, but you stop that by refusing to let the printer talk out of your network at all.
by yuliyp 9y ago
> So you're ok with a compromised printer leaking your medical records?
No, but you stop that by refusing to let the printer talk out of your network at all.
> Or notes used by a police investigator while researching a unsubstantiated or even false accusation leaking thanks to some drive by malware?
That's where on-host monitoring can protect you. It'll also protect you in case that computer can ever connect to any other network.
- zaarn 9y ago>No, but you stop that by refusing to let the printer talk out of your network at all. That's a lost battle, honestly. If you block traffic from the printer to the internet, it starts sending UDP with faked source addresses. If you deploy a VLAN the printer can fake the VLAN Tags. If you physically seperate the printer from any direct connection to your firewall, the printer can look for anything on the network it can use to bounce traffic from (like a DNS server or a computer accepting ICMP echo requests) A sufficiently dedicated attacker can and will extract information through covert channels.