4 ms·

> basic infosec hygiene that would be unacceptable for open source maintainers Opensource printer stack is a legacy mess. There is critical vulnerability almo

> basic infosec hygiene that would be unacceptable for open source maintainers Opensource printer stack is a legacy mess. There is critical vulnerability almost every year. There are not enough money or developers to fix that!

aaviator42 1y ago
> Opensource printer stack is a legacy mess. I don't necessarily disagree, but isn't this because of extremely bad firm/soft/hardware design by the printer companies that then have to be supported by the open source stack?
juliangmp 1y ago
The printer stack as a whole is a legacy mess.. I have an easier time getting a 3D printer to work than any inkjet machine
- diggan 1y ago
  Maybe I got lucky, but in 2017 I bought a Brother DCP-L2520DW laser printer. No matter what OS, computer or network I connect it to, it seems to just work for everyone involved, always, and I don't think I've had a single issue with it since I got it nor did anything at all to set it up, basically installed CUPS on my desktop to get it to work and for Windows/macOS it just works. Not affiliated, just happy user, at least some companies seem to be able to deal with it, regardless if it's open source (my stack) or not (my wife's Apple-stack).
  - Avamander 1y ago
    There has been a strong push by OS makers to unify and simplify printer interfaces to the point that they should not require special drivers. But this process is still ongoing and lazy hardware vendors will continue to be lazy in their switch, if they have the option.
    - barbazoo 1y ago
      What’s that “switch” you’re referring to?
      - oasisaimlessly 1y ago
        "IPP Everywhere" [1][2] [1]: https://wiki.debian.org/CUPSIPPEverywhere https://wiki.debian.org/CUPSIPPEverywhere [2]: https://www.pwg.org/ipp/everywhere.html https://www.pwg.org/ipp/everywhere.html
      - Avamander 1y ago
        IPP Everywhere linked in the other comment, but there's also Mopria certified printers (https://mopria.org/certified-products https://mopria.org/certified-products). Which use WPP drivers on Windows.
  - anticodon 1y ago
    I've bought almost the same model but a few years later. I also enjoy how effortless is connecting this printer to Linux. I have to install brlaser driver manually though. But I did some research before buying (including here on HN) and Brother printers were praised for being reliable and having no problems with Linux drivers.
  - Suppafly 1y ago
    Brother lasers are the cheat mode for cheap quality prints with no BS.
    - indrora 1y ago
      Don't speak too quickly: https://www.tomshardware.com/peripherals/printers/brother-accused-of-locking-down-third-party-printer-ink-cartridges-via-firmware-updates-removing-older-firmware-versions-from-support-portals https://www.tomshardware.com/peripherals/printers/brother-ac...
      - Suppafly 1y ago
        Luckily the old ones last forever, so it won't be a problem for another 20 years lol.
Avamander 1y ago
What are we talking about here?
ajross 1y ago
> Opensource printer stack is a legacy mess. There is critical vulnerability almost every year. There are not enough money or developers to fix that! Maybe true, but no live trojans either, so it's ahead of the game already as I see it.

aaviator42 1y ago

> Opensource printer stack is a legacy mess. I don't necessarily disagree, but isn't this because of extremely bad firm/soft/hardware design by the printer companies that then have to be supported by the open source stack?

juliangmp 1y ago

The printer stack as a whole is a legacy mess.. I have an easier time getting a 3D printer to work than any inkjet machine

diggan 1y ago
Maybe I got lucky, but in 2017 I bought a Brother DCP-L2520DW laser printer. No matter what OS, computer or network I connect it to, it seems to just work for everyone involved, always, and I don't think I've had a single issue with it since I got it nor did anything at all to set it up, basically installed CUPS on my desktop to get it to work and for Windows/macOS it just works. Not affiliated, just happy user, at least some companies seem to be able to deal with it, regardless if it's open source (my stack) or not (my wife's Apple-stack).
- Avamander 1y ago
  There has been a strong push by OS makers to unify and simplify printer interfaces to the point that they should not require special drivers. But this process is still ongoing and lazy hardware vendors will continue to be lazy in their switch, if they have the option.
  - barbazoo 1y ago
    What’s that “switch” you’re referring to?
    - oasisaimlessly 1y ago
      "IPP Everywhere" [1][2] [1]: https://wiki.debian.org/CUPSIPPEverywhere https://wiki.debian.org/CUPSIPPEverywhere [2]: https://www.pwg.org/ipp/everywhere.html https://www.pwg.org/ipp/everywhere.html
    - Avamander 1y ago
      IPP Everywhere linked in the other comment, but there's also Mopria certified printers (https://mopria.org/certified-products https://mopria.org/certified-products). Which use WPP drivers on Windows.
- anticodon 1y ago
  I've bought almost the same model but a few years later. I also enjoy how effortless is connecting this printer to Linux. I have to install brlaser driver manually though. But I did some research before buying (including here on HN) and Brother printers were praised for being reliable and having no problems with Linux drivers.
- Suppafly 1y ago
  Brother lasers are the cheat mode for cheap quality prints with no BS.
  - indrora 1y ago
    Don't speak too quickly: https://www.tomshardware.com/peripherals/printers/brother-accused-of-locking-down-third-party-printer-ink-cartridges-via-firmware-updates-removing-older-firmware-versions-from-support-portals https://www.tomshardware.com/peripherals/printers/brother-ac...
    - Suppafly 1y ago
      Luckily the old ones last forever, so it won't be a problem for another 20 years lol.

Avamander 1y ago

What are we talking about here?

ajross 1y ago

> Opensource printer stack is a legacy mess. There is critical vulnerability almost every year. There are not enough money or developers to fix that! Maybe true, but no live trojans either, so it's ahead of the game already as I see it.