Slashdot Mirror


Xerox Exploits Printer Flaws To Make Pseudo-Holograms

Red Wolf writes "A chance discovery by Xerox lets printers superimpose glossy images on regular printouts, creating the possibility for document authentication along the lines of holograms on credit cards. The new technology, called Glossmark, can use ordinary office printers to superimpose a glossy image on an ordinary printed document in a way that can't be photocopied or otherwise easily reproduced."

33 of 187 comments (clear)

  1. I know what to copy by ajuda · · Score: 5, Funny

    Who wants to let me borrow his credit cards?

  2. Obligatory Joke... by Ieshan · · Score: 5, Funny

    It's not a bug, it's a feature!

  3. Great security... by Anonymous Coward · · Score: 5, Insightful

    If it's easily available on a commercially available printer, how does it provide great security?

    1. Re:Great security... by Alsee · · Score: 3, Insightful

      The idea is that you can't print it unless you know what to tell the printer to print. An ordinary scanner will pick up the image, but it won't pick up the gloss pattern. Therefore you don't have the gloss pattern to send to the printer.

      The problem with their "security" is that I don't think it would be that hard to use a non-standard scanning technique to pick a decent scan of the gloss. It would just take some creative scanning, some image processing, and trial and error to get it right. If there's any motivation to do it then it can be done without too much difficulty.

      To detal one plan, scan it in the usualy way to get the base image. Then use a camera to get digital photos of it from a variety of angles that maximize the gloss. Map the original scan onto the new gloss images and subtract the base image out of the gloss. Hand tweak the glossmap. Viola! Print!

      The method I described would probably have poor resolution in the glossmap, but (1) the glossmap is probably a low resolution process anyway and (2) you can get a high rez glossmap if you just put in more work.

      I suggest that Xerox drop any "security" pretense for this feature and just include it as a cool extra ability. Glossmaps are a million times easier to copy than a hologram. They are useless for security.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  4. Wait.... by kennylives · · Score: 4, Funny

    Isn't running an already-printed page through a printer a violation of the DMCA or something?

    --

    Where the value of X-Mailer: is the true measure of a man...

  5. Security? How? by Anonymous Coward · · Score: 4, Insightful

    way that can't be photocopied or otherwise easily reproduced

    Uh, except for on another Xerox printer?

  6. But it's true... by NeoBeans · · Score: 3, Insightful

    Any bug you can control is a feature! The big question in my mind would be... what would stop some enterprising individual from replicating this bug to forge the watermarks?

    1. Re:But it's true... by schmink182 · · Score: 4, Informative
      You might note that they noted this in the article: The company ultimately will have to decide--if it is intended to be a security-enhancing process aimed at authenticating documents, having the technology widely available to would-be document forgers would be a problem, Rolleston said.

      They apparently are considering using the exploit decoratively instead of for security, since it is always possible to forge something made by "common office printers."

  7. Re:How is this secure..... by Rosyna · · Score: 5, Insightful

    You couldn't copy the original image. You'd have to have to separate source images (the bg and the layover) to counterfeit successfully. It's just another wall, really.

  8. And then... by Misch · · Score: 5, Funny

    And then Xerox gives up the technology, somebody else picks it up and makes a bundle.

    Let's see... Mouse, GUI, Ethernet, Palm Graffiti, WYSIWYG word processors, and more

    --

    --You will rephrase your request for me to go to hell. Goto statements are not acceptable programming constructs
  9. Re:It can be reproduced. Just not copied. by Anonymous Coward · · Score: 4, Insightful

    Can be produced by existing Xerox printing solutions.

    I don't really see how this works. If there's a document I want to fake I just whip out Quark and reproduce the Glossmark on my Xerox printer. Wha?


    "Can be produced" isn't the same as "can be reproduced." Sure, I guess you could print out your own copies -- if you had access to the original images. If I understand correctly, most of the point is that you can't just scan the image and retain the glossmark effect.
  10. Color laserjets? by groove10 · · Score: 5, Informative

    From reading the article (yes I read actually read it), it would seem that only the "wax" type color laserjet printers have this ability. There was a Slashdot article a while back that dealt with color laser printers and alternatives to inkjets. The news.com.com article does specify the models or type of printers where this was discovered. Any other info on this?

    I'm sure some hackers will try to do some mods on their printers to control this as well. {cough}fake holograms{/cough}

    On another note, how cool a job do these "Xerox Scientists" have? I need to get a job where I can hardware hack like these guys.

    --
    MMORPG fan-boy? Prove your worth
    1. Re:Color laserjets? by Anonymous Coward · · Score: 5, Insightful

      On another note, how cool a job do these "Xerox Scientists" have?

      From the books I've read about Xerox, it sounds more frustrating than cool to work in their R&D. You invent all this neat shit, and the copierheads at Xerox dont "get" it, so Xerox doesn't market it.

      Your only hope is to go to work for the other company that will eventually pick up the technology and make a mint with it, or to leave and found your own company to make what you invented.

      And with all the "intellectual property" crap being thrown into employment contracts these days, the latter of those two options is probably right out the door. If Bob Metcalfe was working at Xerox these days, he damn sure wouldn't be allowed to leave and start 3Com to sell ethernet hardware that he whipped up on Xerox's dime.

    2. Re:Color laserjets? by Chanc_Gorkon · · Score: 3, Interesting

      Yes and they aren't droppign anything surprisingly. NOONE tops Xerox in production printing. NOONE! We have a whole campus full of Xerox tech and they have some of the best products around. I wish that they would release VIPP for other manufacturer use as well. Just finished a course on it. VIPP is basically a modified postscript, but it's much more powerful. Feed the printer a tableful of data (comma delimited) with a proper dbm file on the printer (or a jdt for line mode) and you can create letters and even graphs. Plus Xerox makes a FULL COLOR printer that prints 60 ppm! Sure, it's huge, but anything that prints that fast is. Plus the Phasers they make now can understand not just postscript but VIPP as well. There is a chance that Xerox could possibly release VIPP at some point as it's very good and based on postscript in the first place. VIPP is their most open product they have. I doubt they will release it, but printing would change if they did! They aren't so much copier heads any more. Production printing is where it's at and they can make lots of money there.

      --

      Gorkman

  11. Re:Currency by Trigun · · Score: 5, Funny

    I hope this gets used on currency too. It's already so easy to counterfit U.S. money, using Xerox printers. This would be an easily replicated security feature that would draw attention away from the flaws in the printing process.

    So the ink is a little smudged, but look at the glossy square with JFK in it. It has to be real!

  12. So let me get this straight... by i8a4re · · Score: 5, Interesting

    Companies are going to adopt this technology because they can create an "uncopyable" product (probably tickets, coupons, and other vouchers), and they already have the technology in their office.

    In the mean time, some counterfeiter who has the same technology in their office or home will simply copy the main image and recreate the superimposed image in a graphics program. Then he will be able to print "authentic" tickets or whatever whenever he wants.

    The number one blockade in stopping conterfeiters is the machine that produces the items they want to counterfeit, not the complexity of the artwork or image. Sure, the complex image and holograph help, but that is mainly because consumer level and most business level products can't produce images that complex. Give me a few months and I could make a damn good couterfeit $20 bill if I only had the paper and the press that makes them. It wouldn't be perfect, but the average cashier wouldn't notice.

    --

    If I drive fast enough at the red light, it'll appear green.
    1. Re:So let me get this straight... by Anonymous Coward · · Score: 4, Informative

      I could make a damn good couterfeit $20 bill if I only had the paper and the press that makes them.

      And your aunt could be your uncle, if she only had balls and a dick.

      You might get the paper by bleaching one-dollar bills, but you damn sure ain't getting the press. The Intaglio process used on U.S. currency applies the ink to the paper at great pressure, and in sufficient quantity to achieve an embossed effect. U.S. currency has a distinctive feel because of this, and were you to slip an inkjet or color laser-printed bleached-single $20 bill into a stack of $20s you used to pay for something, the cashier would notice it didn't feel right before he/she noticed it didn't look right.

      Intaglio presses are huge, somewhat rare, and cost in the millions of dollars, so you ain't gonna but putting one in your basement anytime soon. If you had the financial capability to do so, you wouldn't need to counterfeit money.

      Having said that, the Secret Service does have counterfeit bills produced by Intaglio presses, and believe that they are being produced by the government of some country hostile to the U.S.-- because that's the kind of moxie it takes to get your hands on an Intaglio press.

  13. basically looks like watermarking by mabhatter654 · · Score: 4, Insightful
    I've noticed it too on photo paper. The way inkjets [i think that's what they're using] layer the ink can create a raised effect on certian printers ...though I mostly use HPs. The idea would be that someone couldn't just grab a document out of a file folder on your desk and color copy it--there's no change to the color..it's not really reproducable..it's too subtle. Heck, you could even put a serial number in a black box and number every copy you print! Then even with access to the hardware you couldn't just reprint something.

    It doesn't look really useful for preventing professional counterfieting, but for "casual" things [retail reciepts, HR files, inter-company corrospandance, etc.] It could come in handy for quick verification.

  14. Hmmm by Pig+Hogger · · Score: 4, Funny

    I suppose the next step would be ATMs that print money???

  15. This can't be legal by TimCrider · · Score: 5, Funny

    How can this be legal under the DMCA? I mean they are obviously circumventing their own protection scheme. Has anyone notified SCO, the MPAA, the RIAA, or better yet the FBI?!?!

  16. Xerox Exploits Printer Flaws... by doi · · Score: 4, Funny
    But of course, you don't hear anything about the OTHER laser printer companies exploiting THEIR printer flaws, even though we all KNOW they're doing it.

    Yet another sad commentary on the rampant cover-ups of the true nature of the pseudo-hologram industry.

    --
    A man's reach must exceed his grasp, or what's an erection for?
  17. Re:Obligatory Joke #2 by tgrigsby · · Score: 5, Funny

    Tickets to the Superbowl: $0
    Credit card to charge up $9000 in stereo equipment: $0
    Same credit card, Quad-CPU, 16 gigs RAM, 1 terrabyte machine with all the latest blings: $0

    A lawyer that can use the "it was a bug in the printer" defense to successfully get you off: Priceless.

    --
    *** *** You're just jealous 'cause the voices talk to me... ***
  18. Re:Great. by NickFitz · · Score: 4, Funny

    What, like the ridiculously high licensing fees on your mouse, your GUI, your network... ;-)

    --
    Using HTML in email is like putting sound effects on your phone calls. Just say <strong>no</strong>.
  19. not layered prints by Anonymous Coward · · Score: 3, Informative

    From what I gathered reading the article... this *technology* is about controlling the glossyness of certain areas on a printed page. I don't think it involves running printed pages back through the printer... instead words/images would be differentiated by their gloss relative to the flat ink surrounding them. Looking straight at a matt photograph one would see nothing unusuall but looking at an angle one could make out shiny text, the degree of gloss is controlled, hence the "invisible to the eye" option.

    just my 2c,
    -ry

  20. Re:details? how? by frdmfghtr · · Score: 3, Insightful

    I'll take a stab at a guess how it works...and if this isn't how it works, I wonder if it would.

    -You print the document as normal.

    -On the repeat print, the "watermark" image color pattern matches the document you already printed. In essence, you double-up on the toner placed down in particular locations to make the Glossmark image. Viewed straight on, the extra-heavy toner pattern is indistinguishable from the rest of the printing as the color is the same, but the glossy surface is seen when viewed at an angle.

    It's just a guess, but it seems to make sense.

    --
    Government's idea of a balanced budget: take money from the right pocket to balance...oh who am I kidding?
  21. Re:Currency by Jack+Auf · · Score: 3, Informative

    It's already so easy to counterfit U.S. money, using Xerox printers.

    Ahem, where exactly are you going to get the paper to print it on? US currency paper has a special cotton content that you can't get in the states, even by special order. And what about the "security stripe"? Nope, sorry.

    --
    "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety" - BF
  22. No wonder. by Greener · · Score: 5, Funny
    Xerox, which is struggling to fend off increasing competition from rivals such as Ikon and Canon

    No wonder Xerox is struggling. While other companies are busy developing new products Xerox techs are destracted by shiny objects.

    "Oooh, shiny!!!"

  23. Re:Security? How? by murgee · · Score: 3, Interesting

    If you don't have sufficient access to the source that produces the hard copy (for instance, a locked PDF), how are you going to get a hard copy without the Glossmark on it? 'Cause, if all you've got is the hard copy with the hologram thing which can't be effectively scanned or copied, you're a bit stuck. (Unless you wanted to re-create the document, or re-create the Glossmark and hope people will think anything with it on it is authentic.)

    --
    mrg
  24. Re:Currency by gurumeditationerror · · Score: 3, Informative

    I don't live in america but if I remember correctly all your notes are the same size, wash a 1 dollar bill and print 100 on it... We can't do that in the UK cos 1,5 10, 20, 50... are all bigger than the lesser valued note. Umm... Not thatI'm condoning counterfeiting or was considering it ~*shifty eyes*~

  25. Re:Currency by mcheu · · Score: 3, Interesting

    While I don't think Xerox printers can handle such small pieces of papter without choking, based on PBS and Discovery channel educational shows on the subject, you can obtain the paper from already printed bills or from foreign currency. Counterfeiters used to chemically remove the ink from small denomination bills and reprint them.

    It's why the US Gov added that metal strip into the 20+ bills with the denomination written into them.

    Dalton paper is used around the world for government documents, so the stuff is probably easier to find than you might think. The big deal is that being in posession of blank Dalton paper is a treasonous act in many countries.

    Considering that the USA is at war right now, does this make counterfeiting a potentially capitol offense?

  26. Re:Obligatory Joke #2 by identity0 · · Score: 4, Funny

    A lawyer that can use the "it was a bug in the printer" defense to successfully get you off: Priceless.

    Paying that lawyer with the same card: even more priceless.

  27. That's what he *said*. by Otto · · Score: 3, Insightful

    You might get the paper by bleaching one-dollar bills, but you damn sure ain't getting the press.

    Yes, but then if you re-read the post you're replying to, that's exactly what he said. It's not the artwork that's stopping him from making a good counterfeit, it's the lack of ability to obtain the machinery to do it.

    Making something "authentic" is relatively easy when the machinery is in every store. The Xerox machine can't make anything not easily counterfeited because everybody could get one cheaply and affordably, and then simply print out their own Glossmark crap.

    --
    - Give a man a fire and he's warm for a day, but set him on fire and he's warm for the rest of his life.
  28. Re:Obligatory Joke #2 by coolgeek · · Score: 3, Interesting
    Unfortunately, it is.

    But only because some morons didn't get that the SI-prefixes were Base 2 when it came to storage capacity and Base 10 when it came to bandwidth. I mean, of course we have subtle little secrets and speak in code words, we're computer geeks goddammit.

    The kibi-, gibi-, and tebi- are the new abominations (imo) used to describe the old-school Base 2, thus a kibibyte is 1024 bytes (whereas a kilobyte was 1024 bytes in the "good old days"), and now a kilobyte it 1000 bytes.

    --

    cat /dev/null >sig