Secret Printer ID Codes May Be Illegal In the EU
I Don't Believe in Imaginary Property writes "In response to a query from a member of the EU Parliament, an EU commissioner issued an official statement (.DOC) saying that, while they do not violate any laws, secret printer tracking dot codes may violate the human right to privacy guaranteed by the EU's Convention of Human Rights and Fundamental Freedoms. If you don't remember what these are, Slashdot has discussed the issue before. In short, most color printers print small yellow dots on every sheet in a code that identifies the printer and, potentially, its owner. The EFF is running an awareness campaign, and a couple of years back made a start on deciphering the yellow dot code."
So to stay private, then, one should print sensitive documents on yellow paper?
In Xanadu did Kubla Khan
A stately pleasure dome decree
First topic on the agenda: biometrics for visitors.
Or was privacy only guaranteed to European Citizens?
and remove the color cartridge. It sucks to waste color ink printing some order confirmation thingy anyway.
I come here for the love
1. Do not buy from the manufacturer.
2. Maybe pay cash when buying printer.
3. Do not send in warranty card.
4. Don't let a factory rep or facility service it.
If you can prevent the printer's serial # from being tied to your identity, you should be OK. Of course, some of the very high-end printers can only be bought from the manufacturer or a registered VAR, so don't use those types of printers for nefarious deeds.
I don't know about printers, but apparently with Canon digital cameras they will register the camera serial number with your name if you send it in to Canon for service.
When you sympathize with stupidity, you start thinking like an idiot.
If any of you have a blue LED (like those found on keychain or pen lights), you can fairly easily see the pattern of dots on a color laser printout (like anything printed in color from Kinkos).
This guy's the limit!
I bet it totally prints yellow dots when you want a picture of the Frosty Piss!
I love the sound of that.
however, in today's terror-terrorized (is that a new expression?) world, there IS no more 'right to privacy'.
I wish there was! but even in europe, there really is not a right to privacy.
even in the US constitution, is there ANY real clauses that talk about right to privacy? other than illegal search and seizure (which has been bastardized into 'we can invade your house and do a sneek-and-peek anytime we SAY so') - there is no right to privacy.
it should be added as a fundamental right, but I don't expect it anytime soon. too much power is gotton by violating your privacy. power is addicting and so the gov won't ever give THAT one back. horse has long left the barn..
--
"It is now safe to switch off your computer."
The article suggests it's only a problem with laser printers, so no ink, only toner
politicians are like babies' nappies: they should both be changed regularly and for the same reasons
Or install the driver...
Come on, if you use a grocery loyalty card and cash every single time, there is no tie to your spending habits. Until you accidentally use a credit card once. And then your entire history can be backfilled.
Better option? Old printer or black ink/toner only printer.
I'd like to see somebody sue the printer companies for prematurely drawing down the yellow ink.
My ... printer .- never -- prints ..- such . silly .-.. codes; -- In --- fact .-. I ... have . never .-.. seen .. such ...- a . thing! ...
I wonder what would happen if you printed a blank sheet of paper, would the dots come out, or if you wanted to confuse the code, maybe print the same item twice on two different printers... Hmmmm, I wonder if that would work.
I'd like to think the above paragraph is a joke. But it's not. Night is falling on the UK.
How is it a privacy invasion? People can figure out who sent that printed paper, so? If you hand wrote it they could figure it out too. Either way they have to have a comparision to identify you, ie. they have to suspect you run a test sheet and compare.
We think our human rights stem from what someone has written down? Do we attribute our freedom to what no one else has taken from us? "even in the US constitution" wtf man, live free or die!
"better ways of doing things eventually just replace the inferior things" - Linus Torvalds 09-08-07
The EFF has some handy dandy info on this very subject, http://w2.eff.org/Privacy/printers/docucolor/
I'm sick of following my dreams. I'm just going to ask where they're goin' and hook up with 'em later.
but all I got was yellow dots
Or is it "IDon'tBelieveInImaginaryProperty.org? Does this guy ever get a submission rejected?
Last week, my brother-in-law was having trouble printing with a brand-new Brother inkjet. He was trying to print a B/W document, but the printer refused to print because the yellow ink cart was depleted. Granted, this is second hand info (to me; third-hand to you,) but it makes me puspicious.
With an inkjet, it'd be pretty obvious if it was "phantom" printing all over a page that was just supposed to have B/W text up top. Something linear at the beginning of a page wouldn't draw as much attention. Unfortunately, I don't have access to the printer in question, otherwise I would've already confirmed that it does or does not print the dots. Our corporate Brother HL-4040CN color laser definitely prints the dots. We tested it last week.
If this breaks privacy laws than so do licence plates. How would you feel if you started finding threatening notes on your car and around your home and the perp could not be caught because of privacy laws and you suffered great harm? How would you feel if they caught the perp when that first note showed up? Freedom is fine, but not when it becomes freedom to harm others with impunity. I would rather not sacrifice my safety on the altar of privacy.
www.Migrainesoft.com - Computer giving you a headache? We can fix that!
Doesn't anyone notice that the EU's "official statement" was released as a .DOC file? So, if I'm a citizen of the EU, I have to pay money to Microsoft to participate in my government?
What's worse is that we're so inured to this sort of thing, nobody even noticed!
Fenestrae delendae sunt.
Are there any digital cameras that watermark photos with identifying information? So that if you take a photo and post it on the internet, the manufacturer/government could track it, even if you strip out the EXIF data?
I'm curious...
My bicyles
All of the documents produced in our office have a large brown ring stamped on them that can be traced back to the coffee mug of the engineer that produced them.
Have gnu, will travel.
There are a couple of differences between license plates and this.
a)The license plates are clearly visible, while the printer code is intended to be unnoticeable by the user. I.e, most users don't even know they are being tracked.
b)When you drive your car you are using public infrastructure, such as the roads. In many countries there is no obligation to have license plates on a car you only use in a private space.
c) The license plate identifies one particular car, not [necessarily] the factory that made it. The printer code identifies the printer, not the paper it is on.
I'm sure there is more, but clearly the parent post is just another example that car analogies suck.
I judt got a nre Kinesis keybiartf so please excusr ant egregiou typos.
Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety. Not very hard to understand. If you are going to let your fear control you, please move away and stop supporting making my country worse.
Go read about the horrific things the intelligence community did during the Cold War even here in the US. Then tell me privacy is overrated when you make it to a government watch list for a "crime" that is only defined in secret laws.
The only change I can believe in is what I find in my couch cushions.
License plates allow you to be identified driving a registered vehicle in public. It's mere convenience that keeps us from wanting to unscrew them every time we drive onto private property (e.g., a parking lot or driveway). The government is saying, "You drive on our roads, you follow our rules". Fair enough, right? It's the government requirement of these laser printer codes that's an invasion of privacy. Maybe a fair (albeit insane) requirement would be that any documents posted in public be encoded with the dots. What's that quote by Ben Franklin or David Hume or Richard Jackson or somebody? "Those who would give up Essential Liberty to purchase a little Temporary Safety, deserve neither Liberty nor Safety."
If you've known about this since 1997 why didn't you tell anybody ? The EFF only started working on it in 2005
> I'd like to know why this is such a big deal to individual people first off.
Because some of us actually organise against the machinations of the state, perhaps you've heard of extraordinary rendition the US govt. has been doing or the 30,000 Argentines who were disappeared between 1976 and 1978 for opposing their govt.
It is extraordinarily naive of you to think that having previously secret (thanks in part to YOU) invisible identifying marks on every document printed from your printer isn't a cause for concern.
There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
Now with Clinton and Obama talking about mandatory health insurance and unionization, we could be out of business next January.
I wish the government would just leave me alone and quit watching every move I make.
I'd feel that the police must be idiots if the only way they can think of to catch the perp is by using secret printer codes. It's a good thing people never use handwriting for threatening notes (or the letters cut out of magazines that always seem to be used for ransom notes on TV).
Support Right To Repair Legislation.
This is the same EU where there are cameras on every corner in the UK? The same EU where cameras track, record, and transmit license plate numbers to central servers nationwide in Germany? The same EU where you register where you live with the government? Where many personal records are available and shared by government offices?
And they are concerned whether printed paper contains a code that is not even tied to a person but merely a print engine? Don't make me laugh.
...to prevent counterfeiting. http://en.wikipedia.org/wiki/EURion_constellation
Tiller's Rule: Never use a word in written form that you've only heard and never read. You will end up looking foolish.
Citation needed. Agencies that issue license plates keep records associating each plate with a unique identifier of a motor vehicle. This VIN includes a "World Manufacturer Identifier" code and a code identifying the plant where the vehicle was made.
Or do English pronouns need more persons?
If I was a terrorist,.. I'd just go back to old school "movable type" printing presses.
The largest city in Turkey is on the European side of the Bosphorus. (In fact, it's also the most populous city in all of Europe, and 4th in the world.) Geographically, Turkey is considered part of Southern Europe.
Turkey is most accurately described as transcontinental. To say it's not European is simply untrue.
c) The license plate identifies one particular car, not [necessarily] the factory that made it. The printer code identifies the printer, not the paper it is on.
The printer code (usually) most certainly DOES identify the paper it is on, it contains the unique page count of that page, and sometimes even the DATE AND TIME of the printout.
For example, a typical dot code will allow you, if deciphered, to say that "This was document 379,125 and was printed from a Lexmark C912 with the serial number '3fg4f2gh31111111oneone'"
Strange... that's a LOT like a car... I.E. "That guy was driving a 1997 Ford Feista with the plate number '8myrust'"
This signature is lame.
Wouldn't they be illegal in Canada too then? Maybe under the Personal Information Protection and Electronic Documents Act.
Best suggestion yet.
Yes, in theory adding random dots would introduce noise into the signal and potentially degrade it to the points it's no longer useful, but only if you can interfere with the pattern. Put another way, unless you know the location of the dot codes, to reach the level of noise necessary to obscure you'd have to cover the page; there would be so many random yellow dots so as to be perceptible.
Apparently it only apply to US citizen. (if you don't think so, I have a hint for you : gitmo).
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
1) plan to counterfeit money with a nice color printer
2) steal one. Social engineering at a firm to get a copy of printer order. Or just plain pay somebody to give you a copy.
3) watch the wrong guy land in prison and laugh all the way to your money laundering place of choice
Alternatively : 1) plan to counterfeit money with a nice color printer
2) Pay an underpaid tech to switch this off (if possible)
3) watch the wrong guy land in prison and laugh all the way to your money laundering place of choice
This can only catch the average idiot. Not a real criminal.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
Every inkjet I've owned striped the image badly unless you dumped out half a cartridge cleaning it, so I doubt a single dot pattern would ever be discernable.
I've printed many blank pages on my HP DeskJet 6540. This is an inkjet printer.
It prints the dots.
It's NOT just lasers or high-end printers!
- I Don't Believe in Imaginary Property
P.S. - If you can get some, print a color page on black paper (preferably semi-gloss), the dots stand out really well
They stand out just fine on white paper under blue light, as one of the EFF pages illustrates.
1. Every color laser printer made in the last 10 years from every manufacturer that I have ever encountered uses the "yellow dots" tagging.
Then I guess you haven't encountered HP 4500 or HP 8500 series printers (maybe they don't need to be repaired as much?). One of the other EFF pages lists a number of other printer models that don't use yellow dots (which isn't to say that they don't use some other kind of tagging).
-- Alastair
> just another example that car analogies suck
Car analogies are like cars.
If you take them too far, they stop working
Even B&W could have some slight embedded peculiarities invisible to the naked eye. A scaled steganographic identifier/pattern could be there, waiting for law enforcement to decode. So, I'd say, if you're worried about COLOR, then worry, too, about B&W...
Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
I've been having an issue with my Dell A920 printer recently where it refuses to print yellow at all. Blues and Reds print fine, but yellows don't get printed. No error message or anything, it just doesn't print. So my printer may well be trying to print the yellow dots, but is failing without knowing it.
I am now wondering if this is a result of the yellow print head getting worn out by all the excess yellow printing in the past. Oh well. I mostly only print in black and white anyway. The printer prints much faster that way.
Intelligent responses welcome, flames will be met with marshmallows.
..Convention on fundamental human rights and freedoms. If you don't remember what these are.. Ho. Ho. Ho.
Repton.
They say that only an experienced wizard can do the tengu shuffle.
I dunno. Probably for the same reason you don't buy a color printer for color and a separate mono laser for b/w - it's costs money and it's inefficient. And remember greyscale is not the same as monochrome. Printing in greyscale usually uses all the colors to provide a broader gamut of 'grey'. Otherwise, you would just get fax-machine quality greyscale.
I judt got a nre Kinesis keybiartf so please excusr ant egregiou typos.
While we should all shout huzzah at the sentiment of your post, the legal status of the argument that the Bill of rights protects privacy is very shaky indeed. Truth be told, the Bill of Rights is a hasty patch on some specific abuses that eighteenth century people were concerned about; it doesn't explicitly recognize or define the underlying problem of privacy.
Now, you might think that Bill of Rights' amendments don't make much sense if there isn't a right to privacy, and liberal justices such as William O. Douglas would agree with you. In Griswold v. Connecticut, the power of the state to take part in (or interfere if you prefer) private decisions about contraception was curbed using precisely this logic. Justice Douglas, writing for the majority discerned a right to privacy in the "penumbra" of the amendments you mention. The choice of words, while metaphorically apt, was unfortunate. It's a red flag advertising that the court is engaging in creative exegesis, rather than dealing in the plain language of the law.
Now consider this: the idea established in the Griswold decision, that the Bill of Rights logically implies a right to privacy, is the fundamental basis of Roe v. Wade. In order to overturn Roe v. Wade, the court would very likely have to throw out the notion of a Constitutional right to privacy. This is why "strict construction" is so important to social conservatives. It's a conservative kind of idea, but really it's not very tenable when you consider the entire range of issues it could be applied to. Where does it say in the Constitution that states have to recognize the personhood of corporations? That's not a strict construction. Really, the prospect under strict construction is more of what we have now: selective literalism. The only difference is ideological.
Basically, one more conservative justice and a Constitutional right to privacy is out the window, in the name of strict construction, and to the end of outlawing abortion. Logically speaking, failing to see a right to privacy in the Bill of Rights is certainly no more of a hurdle than failing to see an unlimited copyright term in continual and routine copyright extension. Common sense tells us the privacy is one of the things the Bill of Rights is supposed to protect. But in fact it does not literally do so, just as it does not literally prevent a copyright term of ten thousand years.
Should the government be able to snoop on your computer? Well, the information on your hard drive is not literally your "person, house, papers, or effects," so it's not literally covered under the Fourth Amendment. It's clearly covered under the intent of the amendment, but that's just another way of saying the Fourth Amendment has a penumbra.
Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
I notice you only claimed Turkey was geographically slightly European, because culturally it is NOT European. Turkey will never be allowed into the EU for a number of reasons - chiefly that it's not European in culture, socially and lacks a real democracy.
Almost three years ago EFF sent a detailed and thoughtful FOIA request to the Secret Service on this topic. Surely if they had responded EFF would have posted the information, so one must assume the SS is sandbagging on this one. Sucks when a law enforcement agency decides to ignore the law.
Really? Every inkjet printer (mostly HPs and Lexmarks) I've ever used will print just fine if the color cartridge is empty or even nonexistent.
>>> "Fenestrae delendae sunt."
So you're so bothered about people being able to read documents that you wrote your sig in Latin so noone could read it.
Presumably it's something like "windows sucks"?
My printer is an inkjet and it DOES print them!
Don't write it off as lasers only so quickly.
Customer:"Can I fill this out and turn it in later?"
Cashier:(^_^)"Sure, anytime. Just go to the customer service desk."
The standard method is to encourage the customer to fill out the form without causing a Bad Customer Experience.
Crap. What did the new CSS do with the "Post anonymously" option??
Tenth Amendment - powers reserved to the people:
"The powers not delegated to the United States by the Constitution, nor prohibited by it to the states, are reserved to the states respectively, or to the people."
Let's shorten that since the states are not involved in this:
"The powers not delegated to the United States by the Constitution are reserved to the people."
The whole point of the Constitution is limited government. Everything else under the sun is reserved to the people.
When did human rights start involving privacy? Maybe we should concentrate on getting the 'right to life' one straight before we start worrying about whether you can surf porn privately. How many countries in the world still simply kill people with different opinions (that blow hard chevez comes to mind, for instance...)?
scie-ent-iol-gistas
have already done this, trying to frame a critical (to them) journalist for bomb threats and other criminal activities. like every other religion, they have their share of fanatics, which for some reason are in high abundance during nascent or turbulent times.
the crap about counter fitters is pure baloney. firstly money is printed on special paper, in almost every country, and this is a closely guarded secret. this is why money feels different. it is usually a high silk fiber content. this is also done to enhance durability, to replace metal coins, which if you see ancient examples, or even some modern ones, shows that currency goes through a lot.
most couterfitting is done on a very high level. it involves very skilled individuals, vastly experienced in all sorts of ink, dyes, presses, and many other processes. it is a constant battle of arcane methods. the majority of counterfitting is done by hostile governments, the major one against the USA was the USSR for several reasons. One was to undermine us currency, another was profit, yet another was to offset the impact a us supported black market had on the USSR regime.
the second source of such bills would be highly organized crime. typically millions of dollars are needed to start such an operation, then there are the logistics of keeping it secret, safe etc.
the idea of some bozo with a laser printer and a pirated copy of photoshop is ridiculous. the biggest purchaser of laser printers worldwide would probably be corporate patronization. this invalidates the claim that only the secret service can read the codes on the paper. no company in their right mind would allow such a backdoor, without it benefiting them as well.
lastly the code is usually generated at the last hardware point, usually an ic on the printhead, to make it as difficult as pssible to eradicate or tamper with. sure you could inject code to generate noise as other posters mentioned, but a random attempt at this would have low chances of success as it is more than likely a system like this would be fault tolerant, and would require a serious compromise before anything like this could be attempted.
this type of tracking is very much in spirit with the USA's lust for tracking every known form of communication by its ctizens. look at project echelon and others, and you will get a rough idea of the scope of this lust. a poignant phrase in the tv series "Gotti" sums it up pretty well "assume they have everything"... "They got satelltes now that can hear a snake fart in Egypt."
The best way to locate the yellow dots is to print on black paper.
I think defective ccds couldn't possibly be that statistically unique and besides couldn't they become defective overtime randomly?? What about the idea of open source hardware?? Demanding manufacturers comply with groups like EFF playing watchdog. This is a terrible infringement on our civil liberties. I mean we are beginning to have a full blown fascist state when we find things like this. Without any democratic component at all we have private companies adding essentially privacy invading police-state devices and features to the products we buy without telling us even.
When can I get reimbursed for all those damn yellow ink cartridges that run out so fast? A dot here or there might not seem like much, but added up over multiple pages - that might explain things. If I'm not using a particular color for a document, then why should I pay for someone else to?
Robert, I did read the article and caught that snippet. The author is vague about how the 'owner' is identified. I doubt the printer's drivers search your disk drive looking for identifying info. More likely, the 'potentially its owner' comes from warranty registration cards the manufacturer can cross-reference against serial number data gathered by the 'identifies the printer' part. The other way it could identify the owner would be for the government to cross reference its own database of citizen-printed documents it has within its archives. Mostly that would be tax forms people ignorantly printed in color instead of B/W.
My assumption about whether it prints user-identifying (name, address, etc.) info could be tested by comparing the pattern of dots when the printer is connected to separate computers.
Seth
$5 / month hosted VPS on linux = awesome!