Cross-site printing?

Monday 21 January 2008

ha.ckers points to a proof-of-concept for printing unexpected pages when visiting a malicious web site. It didn’t work for me. It relies on network printers listening on well-known IP aliases and ports (such as “myprinter:9100”). Mine doesn’t seem to use that name, and I didn’t see in the control panel where to configure the name it will use.

It’s always fascinating to see the unexpected consequences of the systems we build...

Comments

[gravatar]
Aaron Weaver 9:19 PM on 22 Jan 2008

Ned - Is your printer a network based printer? If it is one way to find the ip address is to check the printer control panel, click on the ports tab and scroll down until you find it. Usually home networks are in the 192's so it would be 192.168.1.x:9100 where x is the ip of your printer.

[gravatar]
Ned Batchelder 9:27 PM on 22 Jan 2008

I can find the numeric IP address, but I saw no indication what name it might be using.

Add a comment:

Ignore this:
Leave this empty:
Name is required. Either email or web are required. Email won't be displayed and I won't spam you. Your web site won't be indexed by search engines.
Don't put anything here:
Leave this empty:
URLs auto-link and some tags are allowed: <a><b><i><p><br><pre>.