Canon Printer Hacked To Run Doom Video Game
wiredog writes Security researcher Michael Jordon has hacked a Canon's Pixma printer to run Doom. He did so by reverse engineering the firmware encryption and uploading via the update interface. From the BBC: "Like many modern printers, Canon's Pixma range can be accessed via the net, so owners can check the device's status. However, Mr Jordon, who works for Context Information Security, found Canon had done a poor job of securing this method of interrogating the device. 'The web interface has no user name or password on it,' he said. That meant anyone could look at the status of any device once they found it, he said. A check via the Shodan search engine suggests there are thousands of potentially vulnerable Pixma printers already discoverable online. There is no evidence that anyone is attacking printers via the route Mr Jordon found."
How much paper does that use ?
Another headline I never expected to read.
Do I get unlimited ink?
Canon has the worst, abysmal software to run their devices. I don't know how they manage to make it so complex and large.
... can you run multiplayer doom if you have several of these printers? Maybe make the printer print out red when you're hit?
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
I guess this depends on the frame rate.
So hackfrustrated, very hype, much wow
I'm surprised that the Pixma has that kind of power that it can run Doom. It's a pretty funny hack actually.
I really shouldn't be getting my tech news from sites that are basically a day behind BBC News.
No, John. You are the DDoS zombies.
the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff
Now since they can be hacker apparently, im more interested what else you could do with them then just play doom ;) Small proxy server? Bittorrent client? ssh pipe endpoint? small www server to serve something else then official printer management...
From the researcher's blog, quoting Canon:
We intend to provide a fix as quickly as is feasible.
They...
will have a username/password added
Aw, heck. They're "fixing" it the wrong way.
The right way to deal with DOOM running on a printer's LCD is not to remove this feature. They should simply turn DOOM into official menu option.
One of the NSA and GCHQ's favorite tools.
If you have VSYNC enabled, around 60 PPS (pages per second). I didn't know Canon printers were that fast.
one page per screen, the bad guys are gonna get you early. but it sells a lot of ink, so Canon doesn't mind.
if this is supposed to be a new economy, how come they still want my old fashioned money?
"The colour palette is still not quite right," he said. "But it proves the point and it runs quite quickly, though it's not optimised."
Mr Jordon has no plans to fine tune the demonstration and do that optimisation or take on more work to get the game beyond its loading screen, given how much trouble it took to get it working at all.
"I'm so sick of it," he said. "I'm done."
On a blog entry about Mr Jordon's work, Canon said it intended "to provide a fix as quickly as is feasible".
This will involve adding a user name and password field to the web interface for future Pixma printers and issuing an update for existing owners to add the same feature.
It looks like Cannon is planning to release a fix to correct the color palette and get the game optimized! Even better they are going to add accounts to the game for scores and going to release this for all previous purchasers of the printer! Sweet!
:p
ERROR: SIG NOT FOUND (A)bort, (R)etry, (F)ail?:
Wow... at 10ipm, that means it will have a framerate of 1fpm for a letter-sized printouts. The guy playing on it will not know what hit him...
Use it as Tor Relays.
It doesn't even have to be an exit node, but thousands of added Tor nodes running no logging and providing hop services for in-network traffic would be a huge boon for the privacy of all users. Best part, if you kept the cpu usage down, you could keep a print daemon running on them so the end users of the printer weren't affected, and allow anyone sympathetic to run it with valid deniability.
http://www.smbc-comics.com/?id...
Doomed - printers mean any one can use that subversive technology called print.
There is Freedoom . But I imagine that people want to play authentic Doom with the levels that they used to speedrun back in the day, not a knock-off.
Have gnu, will travel.
From TFA:
Canon said it planned to fix the loopholes on future printers to make them harder to subvert.
Why would you want to subvert someone from installing Doom on your printer?
Really. A printer belongs behind a firewall and has no business having a public IP in the first place. This is neither a new risk not in any way surprising. Asking the manufacturer to secure the printer is not going to work.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
So not one mention in the article or comments as to how on earth, and WHY printers are accessible outside the LAN? If you've got "hackers" inside your company LAN already, a printer getting accessed is probably the least of your worries...
Wow.. a classic /. post! Groovy, dude! Outa sight! Dope! Rad, man.. OK, so /. ain't THAT old!