Slashdot Mirror


Canon Blocks Copy Jobs Using Banned Keywords

aesoteric notes that a future version of Canon's document management system will include the exciting breakthrough technology that will OCR your printed and scanned documents, and prevent distribution of keywords. Documents containing the offending words can be sent to the administrator, without actually telling the user just what word tripped the alarm. The article notes that simply using 1337 for example will get around it.

53 of 309 comments (clear)

  1. How Long... by citoxE · · Score: 5, Funny

    How long until making photocopies of your butt becomes a thing of the past?

    1. Re:How Long... by StikyPad · · Score: 2, Funny

      Should be fine for now unless your butt is labeled.

    2. Re:How Long... by The+MAZZTer · · Score: 5, Funny

      Easy, just add (_(_) to the keywords list!

    3. Re:How Long... by John+Hasler · · Score: 4, Funny

      They can buy the requisite genital recognition software from Chatroulette.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    4. Re:How Long... by John+Hasler · · Score: 4, Funny

      Attention! There will be butt lineup in the cafeteria at 2PM! Be ready to drop your trousers! We are going to find the miscreant who has been mooning the copier!

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    5. Re:How Long... by Rob+the+Bold · · Score: 2, Funny

      How long until making photocopies of your butt becomes a thing of the past?

      This is the new Volvo I want!

      --
      I am not a crackpot.
    6. Re:How Long... by mysidia · · Score: 3, Interesting

      It's amazing how versatile the Chatroulette technology concept could be. The recognition of human body parts from images surprisingly seems to have more in-demand applications than computer vision in general; and all to control people and prevent them from doing stupid things.

      Genitalia image detection could stop abuse of hand-washing robots, keep certain nastiness off slashdot, AI Physicians

      It's amazing people drop to the level of stupidity they'd actually try to photocopy genitals, disregarding the obvious risks involved... that makes them dumber than the computer in that action.

    7. Re:How Long... by Anonymous Coward · · Score: 3, Funny

      Clearly you do not meet the qualifications.

    8. Re:How Long... by WrongSizeGlass · · Score: 4, Funny

      Does the tattoo on my keister count as a label?

    9. Re:How Long... by david+duncan+scott · · Score: 2, Insightful

      The obvious risks of copying my buttcheeks? Care to elaborate, 'cause it's not especially obvious to me. Stupid, maybe, but not risky.

      --

      This next song is very sad. Please clap along. -- Robin Zander

    10. Re:How Long... by aXis100 · · Score: 2, Funny

      Hahahahahahahaha.

      Better add (.)(.) whilst you are at it too. :)

    11. Re:How Long... by DinDaddy · · Score: 3, Insightful

      Have you considered that the glass platen on the copier may not be load rated?

    12. Re:How Long... by BitterOak · · Score: 2, Insightful

      The obvious risks of copying my buttcheeks? Care to elaborate, 'cause it's not especially obvious to me. Stupid, maybe, but not risky.

      How about the fact that many copiers now contain hard drives and keep records of images copied.

      --
      If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
    13. Re:How Long... by Anonymous Coward · · Score: 5, Funny

      The one that says "cock holster"?

    14. Re:How Long... by M.+Baranczak · · Score: 4, Funny

      If you have older staff, add UU.

    15. Re:How Long... by davester666 · · Score: 3, Insightful

      This doesn't PREVENT people from doing anything. It actively ENABLES people to get fired...or blackmailed...

      And the sysadmin gets a lot of interesting emails.

      --
      Sleep your way to a whiter smile...date a dentist!
    16. Re:How Long... by mysidia · · Score: 2, Insightful

      This doesn't PREVENT people from doing anything. It actively ENABLES people to get fired...or blackmailed...

      I am sure the employees will be informed of this technology and the fact that it is in use, or there will be suitable signs on the machines (I cannot imagine what those signs might say), but no doubt the preventive power exists in the form of DETERRENCE. Employees would be told about body part recognition, and believe the sysadmin team will get an e-mail (whether or not they actually do is another matter).

      [* Unless the sysadmin team is known to be a humorous bunch, and someone intentionally photocopies body parts, with messages aimed at the sysadmin staff. Then it might do the opposite of deter.]

      I don't believe the manufacturer will necessarily be able to keep the 'mail it to the sysadmin' feature in the long run.

      It possibly opens up the company (and the manufacturer of the device) to liability and lawsuits, related to privacy violations, and intentionally facilitating privacy violations; intrusion upon privacy and intrusion upon seclusion, in the form of 'bugging the photo copier'.

      This is similar to placing a hidden microphone in a manager's office intending to invade upon their private affairs, without informing the employee there may be a hidden microphone.

      The recording without their knowledge, coupled with a tortious intent, may give the recorded person a cause of action for a lawsuit against the employer.

      From a corporate governance and security perspective, this function can also be a security risk, and possible issue in regards to compliance with security regulations... the sysadmin is not necessarily supposed to be privvy to the nature of all materials that might be copied.

      Standard security practice typically requires separation of duties.

      This would suggest the printer admins do not have access to workstations or servers used for other purposes.

      The "e-mail to sysadmin" feature, especially if it can be performed without actually rejecting the print or copy job, could actually facilitate security compromises, or elevation of privilege (a sysadmin privvy over one area gaining access to information secured by other departments).

      And "printing out a sheet of password cards" to lock in the vault or hand to employees (for password changes) becomes an extremely bad idea.

    17. Re:How Long... by Beale · · Score: 3, Funny

      Well, if you're the admin, it means you get the 'document' sent to you with no extra effort.

  2. Re:Names? by betterunixthanunix · · Score: 4, Interesting

    I wonder if this sort of censorship will find its way into public libraries. You know, they'll claim there is a national security interest in prevent certain kinds of pamphlets from being printed, or something to that effect, and before you know it a routine trip to the library will turn into an interrogation in a back room somewhere.

    --
    Palm trees and 8
  3. First entry in the blocked database... by seanvaandering · · Score: 4, Funny

    Canon sucks

  4. From the "don't give them any ideas" dept. by bughunter · · Score: 4, Interesting

    All a publisher would have to do is to embed a code or passphrase or optical pattern on the pages of their copyrighted publication and then arrange with manufacturers such as Canon or Xerox not to duplicate those pages. The pattern could be a watermark in the background of the content, defeating attempts to obscure it with a post-it not or some such.

    I predict a huge demand for older, dumber photocopiers.

    --
    I can see the fnords!
    1. Re:From the "don't give them any ideas" dept. by Jah-Wren+Ryel · · Score: 2, Interesting

      They already do this for money. It's called the EURion constellation.

      Many copiers are known to shutdown permanently - as in require a visit from the repairman (who will probably report you to the secret service or equivalent anti-money-counterfeiting police in your country) - when presented with that pattern.

      It's just begging for mischief makers to abuse by putting the pattern on all sorts of regular documents.

      --
      When information is power, privacy is freedom.
    2. Re:From the "don't give them any ideas" dept. by Anonymous Coward · · Score: 3, Interesting

      They already do this for money. It's called the EURion constellation.

      Many copiers are known to shutdown permanently - as in require a visit from the repairman (who will probably report you to the secret service or equivalent anti-money-counterfeiting police in your country) - when presented with that pattern.

      It's just begging for mischief makers to abuse by putting the pattern on all sorts of regular documents.

      You just can't make an allegation like that without presenting a citation or link to a list of copiers known to behave in such a manner.

      How are we to know which copiers we can brea^H^H^H^Havoid breaking?

    3. Re:From the "don't give them any ideas" dept. by Ogi_UnixNut · · Score: 5, Informative

      I personally can attest to what the parent said. Back while I was a sysadmin at my old job, I read about the yellow-dot markings that were sneaked into all sorts of printers and copiers for detection, and in some cases, for prevention of copying.

      While reading about this, we came across the knowledge that banknotes had these yellow markings on them, so on a slow Friday we decided to test it out. We stuck a 20GBP note into the machine and hit copy. It promptly jammed and said it needed an engineer to come service it immediately.

      As it was a small company and I was their go-to guy for just about everything, I already knew how to fix it, so I did it myself rather than calling an engineer.

      Thinking it was a coincidence, we ran more tests. The machine would run fine for hundreds of copies, but would jam every single time you tried to copy the banknote, without exception. It really seemed like it was deliberately jamming itself.

      If memory serves me correctly, it was a Toshiba colour copier, but if you want to find out if your copier also does the same, just stick a banknote in it. (UK ones are rejected, but probably others are as well).

      I remember thinking how sneaky it was of them. Rather than telling you that they refuse the action you requested, they jam the machine. I don't know if the engineer would rat you out when he came round to fix it (as we didn't call one) but it is known that the machine will generally hold the last few things copied in memory (I presume to aid debugging of issues).

      P.S Sorry for any typo's etc... typing this on my phone.

  5. Social Problem by rockNme2349 · · Score: 4, Insightful

    You're doing it wrong. If there's anything I've learned in dealing with people, it is never try to create a technical solution to a social problem. If someone wants to make a copy of some secret document, they will quickly learn that the copiers have this software installed and will use a different machine. You need to figure out why they would want to make copies of something you don't want them to, and solve that problem. I could see this being marginally useful for preventing accidental release of information, however the article seems to state that they are trying to stop deliberate users.

    A determined user who has guessed the prohibited keyword could get around it by simply substituting numbers or other characters for letters, such as z00 instead of zoo, representatives for Canon conceded.

    --
    Sewage Treatment Facilities - "Our duty is clear."
  6. Re:Names? by javakah · · Score: 5, Funny

    Hey, look on the bright side, if you manage to get access to the admin side of the copier (or perhaps if you've found that they never set it up, but your copier has this functionality), you can have loads of fun. Imagine if the copier wouldn't copy anything with the letter a in it, and if someone tried to, it would email your manager (or their boss). All the fun of shutting down the copier and spamming someone at the same time!

  7. Stupidity by Daimanta · · Score: 4, Insightful

    "The system can optionally inform the user by email that their attempt has been blocked, but without identifying the keyword in question, maintaining the security of the system."

    Until the user decides to compare his blocked page with blocked pages from other letters or does a binary search for the forbidden word. Glad they thought this through.

    --
    Knowledge is power. Knowledge shared is power lost.
  8. Its like router filters the *admin* sets by stimpleton · · Score: 4, Informative

    From TFA: "The latest version of Uniflow has a keyword-based security system. Once configured by an administrator, the system can prevent a user from attempting to print, scan, copy or fax a document containing a prohibited keyword, such as a client name or project codename."

    So its not some Canon thing where they think some words shouldnt be used. You know, dirty words like Bottom or Crevice.

    The internal admin can set the words. Its like a silent alarm really. No different to a corporate spam filter with words added to a blacklist by an admin.

    --

    In post Patriot Act America, the library books scan you.
    1. Re:Its like router filters the *admin* sets by Anonymous Coward · · Score: 2, Interesting

      It's basically a data loss prevention product. See a string of numbers that looks like a credit card or SSN? Sorry, you're not allowed to print/copy/fax that. Contact your security admin/supervisor to explain why you need to print employee socials and how you plan to safeguard/eventually dispose of that information.

      I can see this being very useful for shops that have to deal with PCI or PII laws.

  9. Re:Names? by Technician · · Score: 5, Interesting

    If you want to block copying of some documents, you can simply watermark them with the anti counterfeiting constellation. Use something that will print the constellation and print up a ream of paper. Use the anti copy paper for the documents you don't want copied.
    Print this in yellow ink in the background.
    http://globalpapersecurity.com/wp-content/uploads/2010/08/150px-EURion.svg_.png/

    --
    The truth shall set you free!
  10. Simple workaround by gstrickler · · Score: 2, Interesting

    Just use CAPTCHAs for any banned words, phrases, or other banned content.

    --
    make imaginary.friends COUNT=100 VISIBLE=false
  11. Re:OCR is not a verb by preaction · · Score: 2, Funny

    Verbing weirds language.

  12. Re:Just what we need... by betterunixthanunix · · Score: 4, Insightful

    Maybe because the photocopier is not enforcing "CONFIDENTIAL DO NOT COPY" -- it goes way beyond that, checking a blacklist of words? It is not that this technology itself is evil, it is more that it can be used for all sorts of evil things.

    You seem to think that these machines will only be purchased by corporations. What gives you that idea? How do you know that public libraries won't have these machines installed? What about schools? The problem is that this technology can and most likely will be abused. Public libraries and schools already filter websites; this will take that sort of censorship to an entirely new level.

    --
    Palm trees and 8
  13. Wow, do any of you people have jobs? by JoeZeppy · · Score: 5, Insightful

    This has nothing to do with foul language and everything to do with people walking out the door with account numbers, medical records, credit card info, social security numbers and other valuable private information.

  14. Apologetically Enthusiastic by LordHatrus · · Score: 2, Insightful

    This is not a privacy issue; there is little expectation of privacy in a workplace when using company property anyway. I personally feel this would be a nice help; imagine working for a government contractor and having having software automatically raise flags when someone copies documents with "DO NOT COPY" or "CONFIDENTIAL" in the OCR text. This is somewhat useful.

  15. Re:Just what we need... by LordLimecat · · Score: 4, Insightful

    Then copy your own damn papers, its not like copiers are futuristic alien technology that only high end corporations have access to.

    I mean damn, I know slashdot is paranoid, but this is ridiculous; this is for corporate enforcement, nothing more.

  16. Re:Just what we need... by david+duncan+scott · · Score: 5, Insightful
    You don't actually know many librarians, do you? They're the ones who put books on the shelf that cause protests. They've installed filtering software when legally mandated, and they get rid of it as soon as they can.

    I renewed my card at Enoch Pratt a few years back, and the librarian looked over my record, said, "Oh, they were collecting SSN's back then--let me just delete THAT from the record..." Not your typical bureaucrats, there, not at all. They're not in it for the money or the power.

    --

    This next song is very sad. Please clap along. -- Robin Zander

  17. Re:slashdot's still here! by DeathElk · · Score: 2

    Canon Inc. has nothing to do with cannon. Also, Canon is a word in it's own right.

  18. Re:Just what we need... by Pseudonym+Authority · · Score: 2, Funny

    They're not in it for the money or the power.

    Oh I beg to differ, knowledge is power you know, and they just love to accumulate knowledge. Damn power hungry librarians.

  19. Re:Just what we need... by eh2o · · Score: 4, Informative

    Yeah they are in it for the sex! Duh.

  20. Tianemen Square, Tibet, Dali Lama by gurps_npc · · Score: 3, Insightful

    will be some of the first 'banned words', I bet. Only in Chinese, not English.

    --
    excitingthingstodo.blogspot.com
  21. Re:Names? by burisch_research · · Score: 4, Informative
    --
    char*f="char*f=%c%s%c;main(){printf(f,34,f,34);}";main(){printf(f,34,f,34);}
  22. Re:Just what we need... by rjames13 · · Score: 3, Funny

    I always wanted to be a locksmith but I don't know howto break into that industry.

  23. A word from the Vendor if I may by Dan+B. · · Score: 4, Interesting

    This has nothing to do with foul language and everything to do with people walking out the door with account numbers, medical records, credit card info, social security numbers and other valuable private information.

    Yes, this is true.

    Although I don't know why this is "Breaking News" considering it has been offered on Xerox products for over 3 years.
    And I should know, we sell this stuff to government departments purely based on the security we can offer them.

    It might be easy to hand write the details off the screen for circumvention, but that is only going to net you a small data set. These systems are designend to stop people walking off with entire client databases and that type of thing. In the governemnt, it's more about keyword 'flagging' that sends the MIB to your desk on very short notice.

    --
    Dan. -- So what if it's spelt wrong, nobody's perfect
    1. Re:A word from the Vendor if I may by im_thatoneguy · · Score: 2, Insightful

      no, as a word from the consumer, either be responsible and make sure everyone knows what your systems exactly do and the dangers of them, or B make a standard dumb machine and mind your own bees wax

      You aren't the consumer. The person who bough the copier in part because of this advertised feature is the consumer. You're just a user. A user who doesn't need to know there are security protocols to protect customer information. The people who need to know about the feature I'm sure are well aware of it.

    2. Re:A word from the Vendor if I may by Mal-2 · · Score: 2, Informative

      It might be easy to hand write the details off the screen for circumvention, but that is only going to net you a small data set. These systems are designend to stop people walking off with entire client databases and that type of thing. In the governemnt, it's more about keyword 'flagging' that sends the MIB to your desk on very short notice.

      It also does nothing to keep you from using your phone to take a picture of the screen -- something I have done when the machine coughs up a BSOD.

      --
      How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
  24. Re:Names? by xclr8r · · Score: 4, Insightful

    Care to elaborate where you think this happens. Most Librarians (grade school excluded) I know adamantly preserve privacy and enable access to information and despise and fight vigorously against anything that tries to infringe on those ideals. On the other hand if a Library (particularly Universities) does not control it's own computers (i.e. separate IT dept. that doesn't answer to Library heads) then your privacy is probably not protected in the same way with regards to internet access.

    --
    Beware of those who profit off the docile and persecute the unbelievers.
  25. Re:Just what we need... by camperslo · · Score: 2, Interesting

    ...this is for corporate enforcement, nothing more.

    I share the same wishful thinking but...

    Considering that many copiers also function as printers, it seems very possible that the keyword technology will end up in a networked printer. If that happens, a hack or backdoor feature to report access of documents with certain markings or keywords to a remote location certainly seems possible. Slowly send data by carefully crafted time server accesses or something and who would know? Couldn't info be passed along under the guise of periodic or startup firmware update checks? If one doesn't see the source of fax/print drivers, couldn't they also be crafted to pass along information?

    To have OCR, one of these copiers is obviously a scanner integrated with a printer and some brains. Compared to what would already be included, it probably wouldn't take much more code to add spooky features. (Don't some printers/drivers already add subtle changes to imbed info in output that can indicate where it came from?)

    Even consumer copiers not marketed as having the banned-keywords features could end up being sold with the same potential capabilities. It's not an unheard of concept. For example some DSL modems originally designed with firewalls shipped with modified firmware for certain ISPs that took away access to and visible signs of the firewalls in their web setup pages.

  26. Re:Just what we need... by Pax00 · · Score: 2, Interesting

    I remember when I was in school and I wanted to run some RPGs but didn't have any of the books anymore.. I couldn't stand having PDFs so I figured I would start printing out the books, 3 hole punch them and put them in 3 ring binders. So I started with the core books and moved on to the supplements. I don't know how many pages I printed. Several thousand easy. The first page it printed was a cover page. The school started catching on to how much was being printed so they limited each print job to something like 20 pages.

    I know my example is about printing and not copying, but I could see where it would help to deal with similar abuses.

  27. Re:Names? by SharpFang · · Score: 2, Funny

    Give the printer a list of words connected with sexual activities, and make it CC any printout containing them to company-wide announce list.

    --
    45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
  28. Re:Just what we need... by The+Creator · · Score: 4, Funny

    As a male Librarian who based his career choice on this notion - Hollywood unfortunately has this one wrong.

    So you've failed miserably at attracting mates by letting down your hair and taking off your glasses?

    --

    FRA: STFU GTFO
  29. Re:Just what we need... by darnkitten · · Score: 2, Interesting
    I run a small rural library. We decided not to apply for those funds which require filtering. We apply for funding for our POTS (telephone), long distance and the data line, but not internet access--the internet access funds mandate filtering, but the line that connects us to the internet does not. It means having to be more cautious when filling out the federal paperwork, and is sometimes not worth the effort. About half the time, we decide just to skip the year's funding.

    We do explain to parents applying for internet passes for their children that we don't filter, and a few parents decide to withhold permission from the kids or decide to only allow them access when the parent is there to watch over them.