Live data from Hacker News

Printers are spontaneously printing odd "SQL" strings

discussions.apple.com

91–100 of 150 posts

Re: Printers are spontaneously printing odd "SQL" strings

#91

Earlier quoted context omitted.

It's not 1994, no one "points" a browser at anything any more.

Look for the good in that post, don't nitpick the phrasing that was chosen.

Thank you for being nice and not resorting to snark against the original snark.

That said, I tell people to point their browser all the time but maybe that's because I've been using browsers since 1994. :)

Re: Printers are spontaneously printing odd "SQL" strings

#92

Earlier quoted context omitted.

Thanks for injecting helpful -- not to mention hilariously witty -- points into this conversation. You left out the following points: * Apple's stuff is incredibly overpriced * Apple never invented anything, it's just good at marketing * Apple's lawsuits are all based on rounded rectangles * Xerox invented the GUI from scratch and it was perfect * Anyone who uses an Apple device is a hipster fanboi cultist

Welcome to hecklernews.

slashdot -> digg -> reddit -> hackernews -> slashdot?

Also: sarcasm is like violence -- any problem it can't solve just requires more sarcasm.

Re: Printers are spontaneously printing odd "SQL" strings

#93

Earlier quoted context omitted.

Semi off topic anecdote: when I was at Lockheed the head of HR came to me with a Manila envelope and said "I need to know who printed this and when! And I need to know now!" I took the envelope and looked at it... It was a bunch of prints of gay porn and gay porn websites. After a few minutes of digging, it was revealed to be one of the directors in the company had printed them late the night before. Checking the bad…

> He was previously thought to be a married straight guy. Not sure why this is relevant. Are you saying Lockheed has/had a don't-ask-don't-tell policy?

Eh, it could just mean that technological mishaps can have real world consequences. Presumably the man did not want people to know that he was gay, whatever the reason for that was we can't say for sure.

Re: Printers are spontaneously printing odd "SQL" strings

#94

Earlier quoted context omitted.

he leaves himself open to a bunch of local-only attacks What kind of attacks might those be? Consider the case of a computer connected to the network with no open ports (other than say, 25 for SSH), with a properly configured firewall, that connects to the Internet through a VPN and with an operating system that auto-updates itself. What could you do to it from inside the network?

Well, if his Internet connection is open, then he's open to being prosecuted for what other people might download on it. As a celebrity, he probably has some substantial de facto immunity against this. (One blog post, and "the Internet" will show up on his side.) The rest of us... not so much.

Actually with an open wifi you're more protected agaist such instances because it's concrete proof that your IP was shared by other people, considering how ISVs assign these IPs dynamically and that their logs may not be accurate.

Re: Printers are spontaneously printing odd "SQL" strings

#95
post #64
post #41

Many, perhaps most network-connected printers, NAS units, and other devices (e.g., home-automation hardware) simply assume that the local network they connect to will be securely protected from external attack, so they're not configured to withstand even the simplest of attacks. This is exactly the opposite of what many security experts recommend: ideally all devices should be secure regardless of whether the network…

Rerun with "-sV --allports" --allports (Don't exclude any ports from version detection) . By default, Nmap version detection skips TCP port 9100 because some printers simply print anything sent to that port, leading to dozens of pages of HTTP GET requests, binary SSL session requests, etc. This behavior can be changed by modifying or removing the Exclude directive in nmap-service-probes, or you can specify --allports…

dfc: running nmap with "--allports" could make the printer waste a lot of paper, so I won't do it. (FWIW, by pointing my browser to the jetdirect port, I was able to control the timing of the http request with more precision and cancel printing immediately after the first page came out.)

PS. No, I was not trying to replicate what happened -- just trying to get a quick sense of how many ports are open. Sorry for the misunderstanding.

Re: Printers are spontaneously printing odd "SQL" strings

#96

Earlier quoted context omitted.

Well, if his Internet connection is open, then he's open to being prosecuted for what other people might download on it. As a celebrity, he probably has some substantial de facto immunity against this. (One blog post, and "the Internet" will show up on his side.) The rest of us... not so much.

Actually with an open wifi you're more protected agaist such instances because it's concrete proof that your IP was shared by other people, considering how ISVs assign these IPs dynamically and that their logs may not be accurate.

Precedent?

Re: Printers are spontaneously printing odd "SQL" strings

#97
post #53
post #16

Earlier quoted context omitted.

This is almost an understatement. My home servers get SLAMMED on a daily basis by a whole wonderful plethora of bots. Most recently has been Muieblackcat. Going on the whole salary analogy: I'd make my current salary plus a bit if I had a penny for ever scan on the box in my living room. I keep the Ukrainian IP's off my blacklist just for fun. Nothing sensitive on the server, just my web playpen. I kind of hope that…

I vaguely recall that unpatched XP averages just a couple minutes on a network before being owned. If you didn't have the SP on a disc it was a race between the updates and the bots. That might have been old linux propaganda though.

I've experienced this. I forget what it was but there was that one exploit that terminated some critical service makes Windows reboot after a 1- or 2-minute countdown. Frickin pain in the ass that was...

Re: Printers are spontaneously printing odd "SQL" strings

#98

Earlier quoted context omitted.

Well, if his Internet connection is open, then he's open to being prosecuted for what other people might download on it. As a celebrity, he probably has some substantial de facto immunity against this. (One blog post, and "the Internet" will show up on his side.) The rest of us... not so much.

Actually with an open wifi you're more protected agaist such instances because it's concrete proof that your IP was shared by other people, considering how ISVs assign these IPs dynamically and that their logs may not be accurate.

Only in the case the local law doesn't hold you responsible for not having protected your network in the first place.

[Edit] This is the case in Germany. http://ratgeber-recht.welt.de/offene-wlan-hotspots-sind-zula... You may have your own hotspot but you may be liable for misuses.

Re: Printers are spontaneously printing odd "SQL" strings

#99
post #95
post #64

Earlier quoted context omitted.

Rerun with "-sV --allports" --allports (Don't exclude any ports from version detection) . By default, Nmap version detection skips TCP port 9100 because some printers simply print anything sent to that port, leading to dozens of pages of HTTP GET requests, binary SSL session requests, etc. This behavior can be changed by modifying or removing the Exclude directive in nmap-service-probes, or you can specify --allports…

dfc: running nmap with "--allports" could make the printer waste a lot of paper, so I won't do it. (FWIW, by pointing my browser to the jetdirect port, I was able to control the timing of the http request with more precision and cancel printing immediately after the first page came out.) PS. No, I was not trying to replicate what happened -- just trying to get a quick sense of how many ports are open. Sorry for the m…

Did you read what I posted? The man page excerpt that I included specifically mentions weird printer behavior.

When you posted the nmap scan report I thought you were trying to replicate what had happened. Otherwise its not really news that print devices have a lot of ports open.

In order to not waste paper you can just have one or two sheets in the tray...

Re: Printers are spontaneously printing odd "SQL" strings

#100
post #53
post #16

Earlier quoted context omitted.

This is almost an understatement. My home servers get SLAMMED on a daily basis by a whole wonderful plethora of bots. Most recently has been Muieblackcat. Going on the whole salary analogy: I'd make my current salary plus a bit if I had a penny for ever scan on the box in my living room. I keep the Ukrainian IP's off my blacklist just for fun. Nothing sensitive on the server, just my web playpen. I kind of hope that…

I vaguely recall that unpatched XP averages just a couple minutes on a network before being owned. If you didn't have the SP on a disc it was a race between the updates and the bots. That might have been old linux propaganda though.

Without SP2 installed, I had multiple systems infected before I had a chance for the service pack to finish installing. I eventually had to order it on CD from Microsoft.

I'm guessing that Windows Firewall (included in SP2) buys you some time, but I can't see unpatched system lasting very long.

Post reply on HN