4 ms·
Apparently there are 300k people in the world who decided they need to have their printer available to the whole internet. It does not make sense, at all, but h
by Fnoord 2y ago
Apparently there are 300k people in the world who decided they need to have their printer available to the whole internet. It does not make sense, at all, but here we are. I suspect a lot of printers are going to be vulnerable with no patches in sight, but... these should only be available via LAN. Which is still an issue, but less so than it seems.
- gmuslera 2y agoMaybe some may fall into the IOT/Embedded category. Wouldn't be very surprise if i.e. a cheap wifi camera have cups installed just because and jumps out in this scan.
- pxc 2y agoThe I in IPP stands for 'Internet'. I guess some people really mean it.
- tsimionescu 2y agoIt's not that. Apparently, several major Linux distros, and the cups-browsed developers, have decided for people that any device on the internet should be able to connect to their system as a printer.
- BenjiWiebe 2y agoHow do they get around the built-in firewall that's been standard on home routers for the past 15 years?
- dwattttt 2y agoFirewall lets it through: cups-browsed explicitly listens for printers advertising themselves. If it's firewalled off, how can it receive the printer advertisements? I don't know what default firewall rules are configured, but on distros that run it I'd assume it's allowed through, otherwise no reason to run it.
- tsimionescu 2y agoThat should protect you from Internet-based attackers, but it doesn't protect you from attackers on the same LAN. For example, if you're in a coffee shop and using their free public wifi, an attacker in that same network can trigger this.
- a96 2y agoOr, there are a whole lot of sites running honeypots. But it's still probably a very large number.