Re: printer attacks?

[doc tarrow <doc.tarrow () gmail com>]

On Tue, Nov 1, 2011 at 8:05 AM, <foofus () foofus net> wrote:

> Is this stuff for real?
> > http://www.foofus.net/?p=468
>
> Yes indeed.
>
>
> https://media.defcon.org/dc-19/video/DEF%20CON%2019%20Hacking%20Conference%20Presentation%20By%20-%20Deral%20Heiland%20-%20From%20Printer%20To%20Pwnd%20Leveraging%20Multifunction%20Printers%20During%20Penetration%20Testing%20-%20Slides.m4v

Thanks for the link.

Here's the thing. I'm working on an internal team. I've watched this talk,
I've downloaded Praeda and scanned some of our internal nets, and think I
have a general sense of what the future might hold in this area. I keep
coming back to my original question. Is this stuff for real? Am I missing
something, or is the answer to "block port 80." I'm curious, but know I'll
never get a serious answer here, to know if these things are actually being
exploited in the wild. 10 minutes with a search engine searching for
internet-connected printers seems to reveal interesting targets.

Also, whoever deals with these things, please note that pen-test@ seems to
be bustimicated.

<pen-test () lists securityfocus com>: ezmlm-reject: fatal: Sorry, I don't
accept messages of MIME Content-Type 'multipart/alternative' (#5.2.3)

That was received when sending from gmail.

t.doc

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/