Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google has indexed thousands of publicly accessible HP printers

port3000.co.uk

Post reply on HN
Print view View original

31–40 of 149 posts

Re: Google has indexed thousands of publicly accessible HP printers

#31

Post by raverbashing »

samstave wrote: post #28
joering2 wrote: post #11

Idea for startup. 1. write a script to scrap google links to HP admin panel 2. filter out the IPs that are from US (given you want to work on US market) 3. assemble the list of printer types and current toner levels. 4. write a script that will print to each of those printers a one single page, stating your company "Cheapo Suppliers Inc" was notified that "your printer is low on toner. Call xxxxxx to re-fill. Lowest…

Nostalgia Scam Time: Back in the late 90s there was a common scam run against big-ish offices. A caller would call asking to talk to the person in charge of printers, typically either IT or Facilities. Once connected they would say that they are sending out the recipients free gift, which was some lame piece of electronics - often a small television. They would get the work address and confirmation to ship the free g…

There's some law against postal fraud that says whatever they send you though the post is yours (to avoid exactly this kind of scam)

You can try not paying the invoice and see what happens.

Re: Google has indexed thousands of publicly accessible HP printers

#32

Post by samstave »

raverbashing wrote: post #31
samstave wrote: post #28

Earlier quoted context omitted.

Nostalgia Scam Time: Back in the late 90s there was a common scam run against big-ish offices. A caller would call asking to talk to the person in charge of printers, typically either IT or Facilities. Once connected they would say that they are sending out the recipients free gift, which was some lame piece of electronics - often a small television. They would get the work address and confirmation to ship the free g…

There's some law against postal fraud that says whatever they send you though the post is yours (to avoid exactly this kind of scam) You can try not paying the invoice and see what happens.

Yeah - this was in 1997...

Re: Google has indexed thousands of publicly accessible HP printers

#34

Post by achillean »

This is actually one of the earliest searches that was used on the Shodan search engine! Shodan specializes in finding all devices connected to the Internet (including Telnet, SSH, FTP, SNMP etc.):

http://www.shodanhq.com/search?q=hp+jetdirect http://www.shodanhq.com/search?q=laserjet http://www.shodanhq.com/search?q=HP-ChaiSOE

Re: Google has indexed thousands of publicly accessible HP printers

#37

Post by Falling3 »

chanux wrote: post #26
KwanEsq wrote: post #14

Interestingly, if you try to browse far into the results, Google decided it actually only has 73 to display (after telling it to include ommitted similar results).

I think Google is cleaning it up. (shows only 13 results for me)

That's with similar entries omitted. You need to go to the second page and have it repeat the search with those entries included.

Re: Google has indexed thousands of publicly accessible HP printers

#38

Post by ihsw »

mrj wrote: post #4

Worse than printing somewhere remote, many of those are probably also scanners. If the original is left on the glass (I forget it all the time), an attacker could scan it remotely.

That's a very bad idea, you should call your lawyer/a law firm to prepare for the impending deluge of threatening letters and lawsuits filed against you.

Re: Google has indexed thousands of publicly accessible HP printers

#39

Post by ChuckMcM »

raverbashing wrote: post #31
samstave wrote: post #28

Earlier quoted context omitted.

Nostalgia Scam Time: Back in the late 90s there was a common scam run against big-ish offices. A caller would call asking to talk to the person in charge of printers, typically either IT or Facilities. Once connected they would say that they are sending out the recipients free gift, which was some lame piece of electronics - often a small television. They would get the work address and confirmation to ship the free g…

There's some law against postal fraud that says whatever they send you though the post is yours (to avoid exactly this kind of scam) You can try not paying the invoice and see what happens.

Yeah and then they retaliate by sending you two pallets of crap toner cartridges, had enough? No? Still not going to pay? Ok here are five pallets of crap toner cartridges sitting in your mail room. Call up the dump, "What? Toner? That probably a toxic waste, you'll have to make an appointment and pay the extortionate hazardous waste fee." Then the toner guy calls back "You either pay us or next time it will be 10 pallets."

Re: Google has indexed thousands of publicly accessible HP printers

#40

Post by kenbellows »

fishbacon wrote: post #18
joering2 wrote: post #11

Idea for startup. 1. write a script to scrap google links to HP admin panel 2. filter out the IPs that are from US (given you want to work on US market) 3. assemble the list of printer types and current toner levels. 4. write a script that will print to each of those printers a one single page, stating your company "Cheapo Suppliers Inc" was notified that "your printer is low on toner. Call xxxxxx to re-fill. Lowest…

Better yet, print a QR code, they can just scan it with their iPhone.

What a great way to distribute malware. Host it on a server somewhere, encode the URL in a QR code, and print just the code, blown up large, with no descriptors to printers everywhere. People will be so intrigued they'll just scan it. Aaaaaaaaand infected.
Post reply on HN