>that most home users have InkJet printers that do not allow remote upgrades; and that printers behind a firewall are not vulnerable to the flaw. HP's line on

>that most home users have InkJet printers that do not allow remote upgrades; and that printers behind a firewall are not vulnerable to the flaw. HP's line on this is pretty dreadful. On the one hand they suggest people switch to a more expensive product that doesn't have any updates (and this is supposed to be a feature.) On the other hand, they falsely claim that a firewall will stop any attacks. It will be interesting to see if malware authors start finding ways to hack firmware (aside from the obvious ways this could be used in a targeted attack.) DD-WRT/OpenWRT capable routers are of course a better target in general, since coming up with standard payloads that can attack a variety of routers has some pretty good proof of concept code. There's also an obvious set of things you can do with a compromised router (create unsecured wireless, sniff traffic, log passwords.) I'm not entirely sure what one might do with a compromised printer that wouldn't be obvious.