Slashdot Mirror


Xerox Exploits Printer Flaws To Make Pseudo-Holograms

Red Wolf writes "A chance discovery by Xerox lets printers superimpose glossy images on regular printouts, creating the possibility for document authentication along the lines of holograms on credit cards. The new technology, called Glossmark, can use ordinary office printers to superimpose a glossy image on an ordinary printed document in a way that can't be photocopied or otherwise easily reproduced."

51 of 187 comments (clear)

  1. I know what to copy by ajuda · · Score: 5, Funny

    Who wants to let me borrow his credit cards?

  2. Obligatory Joke... by Ieshan · · Score: 5, Funny

    It's not a bug, it's a feature!

  3. Great security... by Anonymous Coward · · Score: 5, Insightful

    If it's easily available on a commercially available printer, how does it provide great security?

    1. Re:Great security... by Alsee · · Score: 3, Insightful

      The idea is that you can't print it unless you know what to tell the printer to print. An ordinary scanner will pick up the image, but it won't pick up the gloss pattern. Therefore you don't have the gloss pattern to send to the printer.

      The problem with their "security" is that I don't think it would be that hard to use a non-standard scanning technique to pick a decent scan of the gloss. It would just take some creative scanning, some image processing, and trial and error to get it right. If there's any motivation to do it then it can be done without too much difficulty.

      To detal one plan, scan it in the usualy way to get the base image. Then use a camera to get digital photos of it from a variety of angles that maximize the gloss. Map the original scan onto the new gloss images and subtract the base image out of the gloss. Hand tweak the glossmap. Viola! Print!

      The method I described would probably have poor resolution in the glossmap, but (1) the glossmap is probably a low resolution process anyway and (2) you can get a high rez glossmap if you just put in more work.

      I suggest that Xerox drop any "security" pretense for this feature and just include it as a cool extra ability. Glossmaps are a million times easier to copy than a hologram. They are useless for security.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  4. Wait.... by kennylives · · Score: 4, Funny

    Isn't running an already-printed page through a printer a violation of the DMCA or something?

    --

    Where the value of X-Mailer: is the true measure of a man...

  5. Security? How? by Anonymous Coward · · Score: 4, Insightful

    way that can't be photocopied or otherwise easily reproduced

    Uh, except for on another Xerox printer?

  6. But it's true... by NeoBeans · · Score: 3, Insightful

    Any bug you can control is a feature! The big question in my mind would be... what would stop some enterprising individual from replicating this bug to forge the watermarks?

    1. Re:But it's true... by schmink182 · · Score: 4, Informative
      You might note that they noted this in the article: The company ultimately will have to decide--if it is intended to be a security-enhancing process aimed at authenticating documents, having the technology widely available to would-be document forgers would be a problem, Rolleston said.

      They apparently are considering using the exploit decoratively instead of for security, since it is always possible to forge something made by "common office printers."

    2. Re:But it's true... by jhoffoss · · Score: 2, Interesting
      If something is easily reproducible, it no longer becomes a security feature. The whole basis of anything in security is that it is not easily forgeable. If you could just run a simple program to generate someone's private PGP key from the public key, PGP is now useless. Granted, it may be difficult to manufacture a credit card and get a forged Visa logo on it, but it is possible if you are resourceful enough. On that note, lets not forget that even now, you could purchase the equipment to print holograms, it's just prohibitively expensive if all you want to do is print holographic CD covers to forge MS software or something like that.

      Now, for those countries that use holograms on their currency as a form of validity, this could open the door to forgers more so than now.

      --
      Linux: The world's best text-adventure game.
  7. Re:How is this secure..... by Rosyna · · Score: 5, Insightful

    You couldn't copy the original image. You'd have to have to separate source images (the bg and the layover) to counterfeit successfully. It's just another wall, really.

  8. And then... by Misch · · Score: 5, Funny

    And then Xerox gives up the technology, somebody else picks it up and makes a bundle.

    Let's see... Mouse, GUI, Ethernet, Palm Graffiti, WYSIWYG word processors, and more

    --

    --You will rephrase your request for me to go to hell. Goto statements are not acceptable programming constructs
  9. Re:It can be reproduced. Just not copied. by Anonymous Coward · · Score: 4, Insightful

    Can be produced by existing Xerox printing solutions.

    I don't really see how this works. If there's a document I want to fake I just whip out Quark and reproduce the Glossmark on my Xerox printer. Wha?


    "Can be produced" isn't the same as "can be reproduced." Sure, I guess you could print out your own copies -- if you had access to the original images. If I understand correctly, most of the point is that you can't just scan the image and retain the glossmark effect.
  10. Color laserjets? by groove10 · · Score: 5, Informative

    From reading the article (yes I read actually read it), it would seem that only the "wax" type color laserjet printers have this ability. There was a Slashdot article a while back that dealt with color laser printers and alternatives to inkjets. The news.com.com article does specify the models or type of printers where this was discovered. Any other info on this?

    I'm sure some hackers will try to do some mods on their printers to control this as well. {cough}fake holograms{/cough}

    On another note, how cool a job do these "Xerox Scientists" have? I need to get a job where I can hardware hack like these guys.

    --
    MMORPG fan-boy? Prove your worth
    1. Re:Color laserjets? by Anonymous Coward · · Score: 5, Insightful

      On another note, how cool a job do these "Xerox Scientists" have?

      From the books I've read about Xerox, it sounds more frustrating than cool to work in their R&D. You invent all this neat shit, and the copierheads at Xerox dont "get" it, so Xerox doesn't market it.

      Your only hope is to go to work for the other company that will eventually pick up the technology and make a mint with it, or to leave and found your own company to make what you invented.

      And with all the "intellectual property" crap being thrown into employment contracts these days, the latter of those two options is probably right out the door. If Bob Metcalfe was working at Xerox these days, he damn sure wouldn't be allowed to leave and start 3Com to sell ethernet hardware that he whipped up on Xerox's dime.

    2. Re:Color laserjets? by panurge · · Score: 2, Interesting

      Could I just point out that "laserjet" and "color laserjet" are trade marks of Hewlett Packard, not Xerox, and that the wax printer process from Tektronix is completely different? The "jet" bit is used generically across HPs imaging products.
      (No, I don't work for HP, but I do work for a document output consultancy)

      --
      Panurge has posted for the last time. Thanks for the positive moderations.
    3. Re:Color laserjets? by Chanc_Gorkon · · Score: 3, Interesting

      Yes and they aren't droppign anything surprisingly. NOONE tops Xerox in production printing. NOONE! We have a whole campus full of Xerox tech and they have some of the best products around. I wish that they would release VIPP for other manufacturer use as well. Just finished a course on it. VIPP is basically a modified postscript, but it's much more powerful. Feed the printer a tableful of data (comma delimited) with a proper dbm file on the printer (or a jdt for line mode) and you can create letters and even graphs. Plus Xerox makes a FULL COLOR printer that prints 60 ppm! Sure, it's huge, but anything that prints that fast is. Plus the Phasers they make now can understand not just postscript but VIPP as well. There is a chance that Xerox could possibly release VIPP at some point as it's very good and based on postscript in the first place. VIPP is their most open product they have. I doubt they will release it, but printing would change if they did! They aren't so much copier heads any more. Production printing is where it's at and they can make lots of money there.

      --

      Gorkman

  11. Re:Currency by Trigun · · Score: 5, Funny

    I hope this gets used on currency too. It's already so easy to counterfit U.S. money, using Xerox printers. This would be an easily replicated security feature that would draw attention away from the flaws in the printing process.

    So the ink is a little smudged, but look at the glossy square with JFK in it. It has to be real!

  12. Great. by James+A.+A.+Joyce · · Score: 2, Interesting

    I don't want to sound like a killjoy, but what do you think will be the odds that Xerox lets the average person get their hands on this technology? More likely that they'll take out about half a dozen patents on every known way of implementing it and then enforce ridiculously high licensing fees on any product or organisation which tries to use it.

    1. Re:Great. by NickFitz · · Score: 4, Funny

      What, like the ridiculously high licensing fees on your mouse, your GUI, your network... ;-)

      --
      Using HTML in email is like putting sound effects on your phone calls. Just say <strong>no</strong>.
  13. So let me get this straight... by i8a4re · · Score: 5, Interesting

    Companies are going to adopt this technology because they can create an "uncopyable" product (probably tickets, coupons, and other vouchers), and they already have the technology in their office.

    In the mean time, some counterfeiter who has the same technology in their office or home will simply copy the main image and recreate the superimposed image in a graphics program. Then he will be able to print "authentic" tickets or whatever whenever he wants.

    The number one blockade in stopping conterfeiters is the machine that produces the items they want to counterfeit, not the complexity of the artwork or image. Sure, the complex image and holograph help, but that is mainly because consumer level and most business level products can't produce images that complex. Give me a few months and I could make a damn good couterfeit $20 bill if I only had the paper and the press that makes them. It wouldn't be perfect, but the average cashier wouldn't notice.

    --

    If I drive fast enough at the red light, it'll appear green.
    1. Re:So let me get this straight... by jemfinch · · Score: 2, Informative

      Give me a few months and I could make a damn good couterfeit $20 bill if I only had the paper and the press that makes them.


      Which is exactly why both the company that produces the paper and the company that produces the printing press are under contractual obligation not to sell either to anyone but the US government.

      "Contractual obligation," you say? I pity the poor fool who tries to go behind the federal government's back when it comes to the money it prints. And you thought IRS audits were bad...

      Jeremy
    2. Re:So let me get this straight... by Anonymous Coward · · Score: 4, Informative

      I could make a damn good couterfeit $20 bill if I only had the paper and the press that makes them.

      And your aunt could be your uncle, if she only had balls and a dick.

      You might get the paper by bleaching one-dollar bills, but you damn sure ain't getting the press. The Intaglio process used on U.S. currency applies the ink to the paper at great pressure, and in sufficient quantity to achieve an embossed effect. U.S. currency has a distinctive feel because of this, and were you to slip an inkjet or color laser-printed bleached-single $20 bill into a stack of $20s you used to pay for something, the cashier would notice it didn't feel right before he/she noticed it didn't look right.

      Intaglio presses are huge, somewhat rare, and cost in the millions of dollars, so you ain't gonna but putting one in your basement anytime soon. If you had the financial capability to do so, you wouldn't need to counterfeit money.

      Having said that, the Secret Service does have counterfeit bills produced by Intaglio presses, and believe that they are being produced by the government of some country hostile to the U.S.-- because that's the kind of moxie it takes to get your hands on an Intaglio press.

    3. Re:So let me get this straight... by SushiFugu · · Score: 2, Funny

      Give me a few months and I could make a damn good couterfeit $20 bill if I only had the paper and the press that makes them.

      Yes, and I could build a nuclear bomb if I only had some nuclear... and a bomb.

    4. Re:So let me get this straight... by johnny0101 · · Score: 2, Funny

      There's decent evidence that the US has done exactly this in recent conflicts, at least in Iraq I and Bosnia. Google around for it if you're interested.

      Because if it's on the internet, it must be true!!

      --

      ----
      In Soviet Russia, the overlords welcome you!
  14. details? how? by scrotch · · Score: 2, Interesting

    I'd like to see some details about how they do this. Our office just got a Xerox color laser printer and would probably use this for some non-security stuff.

    When they say "current printers," it sounds like ours would just need a driver upgrade or something. I don't know how that's possible, but I don't know much about hardware and drivers. I'm also curious whether they'll charge for this new "feature" or just include it as an upgrade. Or whether it will only be available on newer high end printers despite working on current technology.

    1. Re:details? how? by frdmfghtr · · Score: 3, Insightful

      I'll take a stab at a guess how it works...and if this isn't how it works, I wonder if it would.

      -You print the document as normal.

      -On the repeat print, the "watermark" image color pattern matches the document you already printed. In essence, you double-up on the toner placed down in particular locations to make the Glossmark image. Viewed straight on, the extra-heavy toner pattern is indistinguishable from the rest of the printing as the color is the same, but the glossy surface is seen when viewed at an angle.

      It's just a guess, but it seems to make sense.

      --
      Government's idea of a balanced budget: take money from the right pocket to balance...oh who am I kidding?
  15. basically looks like watermarking by mabhatter654 · · Score: 4, Insightful
    I've noticed it too on photo paper. The way inkjets [i think that's what they're using] layer the ink can create a raised effect on certian printers ...though I mostly use HPs. The idea would be that someone couldn't just grab a document out of a file folder on your desk and color copy it--there's no change to the color..it's not really reproducable..it's too subtle. Heck, you could even put a serial number in a black box and number every copy you print! Then even with access to the hardware you couldn't just reprint something.

    It doesn't look really useful for preventing professional counterfieting, but for "casual" things [retail reciepts, HR files, inter-company corrospandance, etc.] It could come in handy for quick verification.

  16. Silly question... by rf0 · · Score: 2, Interesting

    Now this might be a stupid question but using this would it be possible to have say two pages imposed on one so you could "read" a book by twisting the page...

    Just a thought

    Rus

    1. Re:Silly question... by dAzED1 · · Score: 2, Insightful
      its not really a hologram. Its a watermark-type thing. If it were a hologram - sure.

      Holograms have a bit more depth than 2 layers, however.

      was this a serious question? I can never tell these days if someone is just acting, or being...

  17. Hmmm by Pig+Hogger · · Score: 4, Funny

    I suppose the next step would be ATMs that print money???

  18. This can't be legal by TimCrider · · Score: 5, Funny

    How can this be legal under the DMCA? I mean they are obviously circumventing their own protection scheme. Has anyone notified SCO, the MPAA, the RIAA, or better yet the FBI?!?!

  19. Its not a hologram people. by nurb432 · · Score: 2, Informative

    Its just multilayer printing, its has NOTHING to do with a hologram.

    Its interesting, though pretty much common sense, if you have run a sheet thru a printer 15 times.. ( and pray it doesn't jam.. the structure of paper is changed when it passes thru a fuser.. every time after that you risk paper jams. )

    --
    ---- Booth was a patriot ----
  20. Xerox Exploits Printer Flaws... by doi · · Score: 4, Funny
    But of course, you don't hear anything about the OTHER laser printer companies exploiting THEIR printer flaws, even though we all KNOW they're doing it.

    Yet another sad commentary on the rampant cover-ups of the true nature of the pseudo-hologram industry.

    --
    A man's reach must exceed his grasp, or what's an erection for?
  21. Re:Obligatory Joke #2 by tgrigsby · · Score: 5, Funny

    Tickets to the Superbowl: $0
    Credit card to charge up $9000 in stereo equipment: $0
    Same credit card, Quad-CPU, 16 gigs RAM, 1 terrabyte machine with all the latest blings: $0

    A lawyer that can use the "it was a bug in the printer" defense to successfully get you off: Priceless.

    --
    *** *** You're just jealous 'cause the voices talk to me... ***
  22. not layered prints by Anonymous Coward · · Score: 3, Informative

    From what I gathered reading the article... this *technology* is about controlling the glossyness of certain areas on a printed page. I don't think it involves running printed pages back through the printer... instead words/images would be differentiated by their gloss relative to the flat ink surrounding them. Looking straight at a matt photograph one would see nothing unusuall but looking at an angle one could make out shiny text, the degree of gloss is controlled, hence the "invisible to the eye" option.

    just my 2c,
    -ry

  23. Re:Currency by Jack+Auf · · Score: 3, Informative

    It's already so easy to counterfit U.S. money, using Xerox printers.

    Ahem, where exactly are you going to get the paper to print it on? US currency paper has a special cotton content that you can't get in the states, even by special order. And what about the "security stripe"? Nope, sorry.

    --
    "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety" - BF
  24. No wonder. by Greener · · Score: 5, Funny
    Xerox, which is struggling to fend off increasing competition from rivals such as Ikon and Canon

    No wonder Xerox is struggling. While other companies are busy developing new products Xerox techs are destracted by shiny objects.

    "Oooh, shiny!!!"

  25. Re:Currency by OECD · · Score: 2, Informative

    I hope this gets used on US currency. Holograms haven't been used yet because they haven't survived the torture tests. Maybe this will fare better.

    This tech takes advantage of the way laser printers melt toner to produce an image on paper. It would only work if currency was laser imaged. That won't happen b/c the process is too slow and it certainly wouldn't survive a torture test.

    The drawback that I see is that it only works on images--plain text wouldn't have enough toner laid down to produce a noticeable image.

    --
    One man's -1 Flamebait is another man's +5 Funny.
  26. Re:Security? How? by murgee · · Score: 3, Interesting

    If you don't have sufficient access to the source that produces the hard copy (for instance, a locked PDF), how are you going to get a hard copy without the Glossmark on it? 'Cause, if all you've got is the hard copy with the hologram thing which can't be effectively scanned or copied, you're a bit stuck. (Unless you wanted to re-create the document, or re-create the Glossmark and hope people will think anything with it on it is authentic.)

    --
    mrg
  27. My guess how it works by Viadd · · Score: 2, Informative

    First, this is nothing like a hologram. (Reporter: This is shiny, holograms are shiny, this must be a hologram.)

    When you print continuous tone images with specific ink colors, you have to lay down tiny dots that cover, e.g. 30% of the paper with cyan, 20% magenta, 10% yellow, 15% black. The inks are then fixed in some way: heating, rolling, burnishing or whatever--details vary based on printing technology.

    If you put down the ink so that the cyan and yellow dots are: separated by a small gap; or touching each other; or piled up on top of each other; you will get different print characteristics.

    It may be e.g., that when wax-based ink drops are piled on top of each other, the burnishing gives it a glossy texture, while the same amounts of inks distributed in separate dots gives a matte finish. (This is just an example based on absolutly no specific knowledge.)

    Postscript and other printer control languages are sufficiently expressive that the software can control where the ink dots go. This lets the glossiness be controlled.

    This posting is probably a DMCA violation.

  28. Re:Currency by gurumeditationerror · · Score: 3, Informative

    I don't live in america but if I remember correctly all your notes are the same size, wash a 1 dollar bill and print 100 on it... We can't do that in the UK cos 1,5 10, 20, 50... are all bigger than the lesser valued note. Umm... Not thatI'm condoning counterfeiting or was considering it ~*shifty eyes*~

  29. Finally... by ducomputergeek · · Score: 2, Insightful

    Finally I can replace this candle wax and stamp sealer from the 1500's!

    --
    "The problem with socialism is eventually you run out of other people's money" - Thatcher.
  30. You are a little off by Groo+Wanderer · · Score: 2, Funny

    What are you saying, Xerox didn't invent those, App^h^h^h MS did! Just ask their PR department, they'll set you straight, and send you a free copy of 'MS History v3.0 - This time we got it right'.

    -Charlie

    (Yes, once again, sarcasm, I do know my history).

  31. Re:Currency by mcheu · · Score: 3, Interesting

    While I don't think Xerox printers can handle such small pieces of papter without choking, based on PBS and Discovery channel educational shows on the subject, you can obtain the paper from already printed bills or from foreign currency. Counterfeiters used to chemically remove the ink from small denomination bills and reprint them.

    It's why the US Gov added that metal strip into the 20+ bills with the denomination written into them.

    Dalton paper is used around the world for government documents, so the stuff is probably easier to find than you might think. The big deal is that being in posession of blank Dalton paper is a treasonous act in many countries.

    Considering that the USA is at war right now, does this make counterfeiting a potentially capitol offense?

  32. Re:Obligatory Joke #2 by identity0 · · Score: 4, Funny

    A lawyer that can use the "it was a bug in the printer" defense to successfully get you off: Priceless.

    Paying that lawyer with the same card: even more priceless.

  33. That's what he *said*. by Otto · · Score: 3, Insightful

    You might get the paper by bleaching one-dollar bills, but you damn sure ain't getting the press.

    Yes, but then if you re-read the post you're replying to, that's exactly what he said. It's not the artwork that's stopping him from making a good counterfeit, it's the lack of ability to obtain the machinery to do it.

    Making something "authentic" is relatively easy when the machinery is in every store. The Xerox machine can't make anything not easily counterfeited because everybody could get one cheaply and affordably, and then simply print out their own Glossmark crap.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  34. Re:Security? How? by iantri · · Score: 2, Informative

    ?

    The document can still be reproduced, the point is -- the pseudo-hologram can not. If the document is missing the pseudo-hologram, you know that it has been duplicated.

  35. Re:Security? How? by wirelessbuzzers · · Score: 2, Informative

    The security would lie in the fact that it looks different from different angles. So if you scan it/photocopy it/whatever, you only get *one* angle on it, and thus there is no easy way to get a digitized version of the watermark to feed to that other Xerox printer.

    --
    I hereby place the above post in the public domain.
  36. Re:Currency by BlaisePascal · · Score: 2, Informative

    The US has never repudiated its currency, and is unlikely to do so, so a $20 printed before the addition of the polymer security stripe is still legal tender, if somewhat rare. If you were trying to reproduce high quality paper for counterfeit currency, you'd best aim for pre-polymer-strip bills. That will also save you from having to deal with some of the the other publically acknowledged anticounterfeiting measures (like microprinting, variable optical printing, etc).

    Paper currency in the US is printed on paper that is 25% linen, 75% cotton fiber in content, with small amounts of blue and red silk fibers added into the pulp. There is no wood pulp.

    Processing leaves the paper a uniform shade of beige or off-white, easily distinguished from most bleached paper. This color is also an anticounterfeiting measure, by the way, since its easily distinguished from white, and bleaching away the ink from an existing bill will likely change that color.

  37. Re:Obligatory Joke #2 by coolgeek · · Score: 3, Interesting
    Unfortunately, it is.

    But only because some morons didn't get that the SI-prefixes were Base 2 when it came to storage capacity and Base 10 when it came to bandwidth. I mean, of course we have subtle little secrets and speak in code words, we're computer geeks goddammit.

    The kibi-, gibi-, and tebi- are the new abominations (imo) used to describe the old-school Base 2, thus a kibibyte is 1024 bytes (whereas a kilobyte was 1024 bytes in the "good old days"), and now a kilobyte it 1000 bytes.

    --

    cat /dev/null >sig
  38. Re:Obligatory Joke #2 by James+Lanfear · · Score: 2, Informative

    And just out of curiousity, who exactly popped up and decided that a kilobyte was no longer 1024 bytes? I never heard of this.

    The IEC. It isn't exactly a redefinition, since AFAIK kilobyte wasn't officially defined as a unit by many standards organizations. Kibi- and friends were coined because standards bodies are by their nature incredibly pedantic, so overloading the SI prefixes was out of the question.

    There was an alternative proposal to prefix binary units with 'di-', so 1024 bytes would be a dikilobyte. In writing a subscript '2' would be inserted after the prefix, giving you something like K2b. You were explicitly allowed to keep saying 'kilobyte' in conversation. This system is vastly superior for any number reasons, which is why it wasn't adopted.

    As far as I know 'byte' is still undefined, so while a one KiB is definitely 1024 bytes, no one can say how many bits it is.