4 ms·

That's nearly as many as Code Red and roughly 100K more than SQL Slammer.

by nullindividual 2y ago

chupasaurus 2y ago
Add every macOS-running device to the picture (who disables cupsd?)...
- cowsandmilk 2y ago
  Generally, CUPS on a Mac is bound to localhost. It is highly atypical for a Mac to make it so any computer on the internet or even local network can make requests to its cups server.
  - deleted 2y ago
    [deleted]
  - tsimionescu 2y ago
    The problem isn't CUPS itself, it's the automatic printer discovery mechanism. That's cups-browsed on Linux, not sure how it's achieved on a Mac. And the printer discovery service can't be firewalled: by definition, it has to listen for outside connections to be in any way useful. This is where things like Windows' trusted VS untrusted networks make sense: it's perfectly nice to allow printers to register to your system on your home network, it's a horrible idea when you connect to an airport wifi.
- sitharus 2y ago
  My mac right now running Sonoma 14.6.1, with no system modifications or MDM: ≻ ps aux | grep -i cups xxxxx 31407 0.0 0.0 410741456 1600 s000 S+ 3:18pm 0:00.01 grep --color=auto -i cups cupsd is not running. If I go to print something cupsd will start up, and after a while of idle it'll shut down again.
  - naming_the_user 2y ago
    Same here. Also, using netstat for the PID you can see that it's only listening on localhost ipv4/ipv6.
  - pxc 2y ago
    The socket activation thing it has with systemd as well, but I don't know if there are facilities for automatically shutting it down like that as well. That's a nice touch, and it'd be cool if Linux distros added that.
- nullindividual 2y ago
  macOS has a firewall on by default.
  - tsimionescu 2y ago
    That doesn't help if the goal is to allow printers to register automatically to your system.
- pxc 2y ago
  CUPS is also part of iOS and iPadOS.
  - formerly_proven 2y ago
    If those ship cups, why do they require special AirPrint-compatible printers?
    - pxc 2y ago
      I dunno. I assumed that > The standards-based, open source printing system developed by Apple for iOS®, iPadOS®¹ ships on iOS® and iPadOS®. But maybe it doesn't. ¯\_(ツ)_/¯ In seriousness, exposing only a very limited interface to a flexible, capable system seems to me very on-brand for Apple. Maybe they don't iOS and iPadOS to be of the kind of platform where one thinks about drivers, even if exposing CUPS features to users would let users accomplish more without much trouble. Or maybe they see printer drivers as essentially a legacy feature in the face of a 'driverless' future. Not my cup of tea, but both seem like things leaders at Apple would do/think. -- https://www.cups.org/ https://www.cups.org/
      - seba_dos1 2y ago
        CUPS predates iOS by a decade and wasn't developed by Apple. Apple CUPS is a distinct distribution of CUPS.
        pxc 2y ago
        Yes, and CUPS was used on macOS, from which iOS was forked before Apple releases the first iPhone. And from that same year (2007) until 2019, Apple employed the creator and chief maintainer of CUPS, which is presumably how they got their hands on the cups dot org domain. Then (as is typical of Apple's treatment of open-source), Apple stonewalled outside contributions and public releases became increasingly sparse and insignificant. So the creator and longtime ch8ef maintainer of CUPS, now outside Apple, created a new fork under the OpenPrinting banner. Thus CUPS became 'Apple CUPS' and the 'CUPS' everyone else cared about was now OpenPrinting CUPS. My point was that Apple's language on the website indicates that they probably use CUPS on iOS and iPadOS, not that that language describes CUPS' origins or is informative about the nearly three decade history of of the software or the current landscape of its forks. (Although in fairness to Apple here— a company of which I am not a fan— 'developed by' doesn't mean the same thing as 'authored by' or 'created by'.)

That's nearly as many as Code Red and roughly 100K more than SQL Slammer.

chupasaurus 2y ago

Add every macOS-running device to the picture (who disables cupsd?)...

cowsandmilk 2y ago
Generally, CUPS on a Mac is bound to localhost. It is highly atypical for a Mac to make it so any computer on the internet or even local network can make requests to its cups server.
- deleted 2y ago
  [deleted]
- tsimionescu 2y ago
  The problem isn't CUPS itself, it's the automatic printer discovery mechanism. That's cups-browsed on Linux, not sure how it's achieved on a Mac. And the printer discovery service can't be firewalled: by definition, it has to listen for outside connections to be in any way useful. This is where things like Windows' trusted VS untrusted networks make sense: it's perfectly nice to allow printers to register to your system on your home network, it's a horrible idea when you connect to an airport wifi.
sitharus 2y ago
My mac right now running Sonoma 14.6.1, with no system modifications or MDM: ≻ ps aux | grep -i cups xxxxx 31407 0.0 0.0 410741456 1600 s000 S+ 3:18pm 0:00.01 grep --color=auto -i cups cupsd is not running. If I go to print something cupsd will start up, and after a while of idle it'll shut down again.
- naming_the_user 2y ago
  Same here. Also, using netstat for the PID you can see that it's only listening on localhost ipv4/ipv6.
- pxc 2y ago
  The socket activation thing it has with systemd as well, but I don't know if there are facilities for automatically shutting it down like that as well. That's a nice touch, and it'd be cool if Linux distros added that.
nullindividual 2y ago
macOS has a firewall on by default.
- tsimionescu 2y ago
  That doesn't help if the goal is to allow printers to register automatically to your system.
pxc 2y ago
CUPS is also part of iOS and iPadOS.
- formerly_proven 2y ago
  If those ship cups, why do they require special AirPrint-compatible printers?
  - pxc 2y ago
    I dunno. I assumed that > The standards-based, open source printing system developed by Apple for iOS®, iPadOS®¹ ships on iOS® and iPadOS®. But maybe it doesn't. ¯\_(ツ)_/¯ In seriousness, exposing only a very limited interface to a flexible, capable system seems to me very on-brand for Apple. Maybe they don't iOS and iPadOS to be of the kind of platform where one thinks about drivers, even if exposing CUPS features to users would let users accomplish more without much trouble. Or maybe they see printer drivers as essentially a legacy feature in the face of a 'driverless' future. Not my cup of tea, but both seem like things leaders at Apple would do/think. -- https://www.cups.org/ https://www.cups.org/
    - seba_dos1 2y ago
      CUPS predates iOS by a decade and wasn't developed by Apple. Apple CUPS is a distinct distribution of CUPS.
      - pxc 2y ago
        Yes, and CUPS was used on macOS, from which iOS was forked before Apple releases the first iPhone. And from that same year (2007) until 2019, Apple employed the creator and chief maintainer of CUPS, which is presumably how they got their hands on the cups dot org domain. Then (as is typical of Apple's treatment of open-source), Apple stonewalled outside contributions and public releases became increasingly sparse and insignificant. So the creator and longtime ch8ef maintainer of CUPS, now outside Apple, created a new fork under the OpenPrinting banner. Thus CUPS became 'Apple CUPS' and the 'CUPS' everyone else cared about was now OpenPrinting CUPS. My point was that Apple's language on the website indicates that they probably use CUPS on iOS and iPadOS, not that that language describes CUPS' origins or is informative about the nearly three decade history of of the software or the current landscape of its forks. (Although in fairness to Apple here— a company of which I am not a fan— 'developed by' doesn't mean the same thing as 'authored by' or 'created by'.)