3 ms·
Fortunately, my trusty old LaserJet 1010 does not have a network interface. But I suspect that outside of organizations dealing with classified data, printer se
by krylon 8y ago
Fortunately, my trusty old LaserJet 1010 does not have a network interface. But I suspect that outside of organizations dealing with classified data, printer security is fairly terrible, anyway.
- londons_explore 8y agoToo many organisations put printers on their internal networks. Printers should be on a seperate subnet, firewalled off to oncy accept incoming connections (and maybe outbound to specific radius and SMTP servers), and not given internet access.
- reaperducer 8y agoThen they can’t automatically order supplies. The printer I work with these days will phone for supplies that tend to arrive the day before the toner runs out. Although I imagine the network connection could be replaced with a phone line, but there’s only one landline in this company of 500+ people and I’m using it for something else.
- krylon 8y agoAt work, we have an Agent running on one of our servers that queries the printers via SNMP (Well, I think it uses SNMP) and then sends the results to the mothership. When toner runs low, new toner arrives. But yeah, we keep our printers on the same network segment as the clients. Maybe we should change that. Then again, I have enough on my plate as it is.
- reaperducer 8y agoBut I suspect that outside of organizations dealing with classified data, printer security is fairly terrible, anyway. You’d be surprised. One org I worked for had a Kyocera all kitted our for HIPAA compliance. I looked through the manual for it once and it glossed over a number of very interesting data handling techniques. The only one I remember off the top of my head is that after a print job, the internal hard drive would scrub itself and repeatedly write garbage data over the location of the previous print job. To the user it was seamless, except for the occasional tiny “Purging hard drive data” notice at the bottom of the printer’s screen.
- krylon 8y agoWell, in a way, companies that need to be HIPAA-compliant deal with kind-of classified data. I should have chosen my wording more carefully.