Tag Archive for Printer

Secure Your Printer: Protect Personal Data from Hackers

Secure Your Printer: Protect Personal Data from HackersDid you know your printer could be a gateway for hackers to access your data? I have been writing about safeguarding personal data since 2005. By now, everyone should know how to protect personal data on computers and phones—meticulously encrypting emails, using passkeys, and regularly updating software. Despite the hard work, one vulnerability often gets overlooked: the printer. Figuring out how to dispose of a printer safely can make or break online security.

New revelations about certain printers recently highlighted the unforeseen security risks lurking in our offices and homes.  However, with the following tech tips from cybersecurity experts, you can combat the unexpected threat found in many printers and fortify your data against hackers.

Why Printers Pose a Security Risk

Any digital device that connects to Wi-Fi, including printers, stores data about the network on its hard drive.  This is usually beneficial since it allows the printer to automatically connect to the network without requiring you to re-enter the information every time. However, Chris Pierson, CEO of the cybersecurity company BlackCloak, warns that when you sell or recycle a printer, you should delete this saved data by performing a memory wipe or factory reset. The reset prevents cybercriminals from discovering and exploiting the information on the printer.

There’s just one problem: Canon has announced a security flaw in several printers. The security flaw leaves behind the stored Wi-Fi information even after the reset process.  If a hacker gains access to the printer after you sell it or throw it away, they could find these wireless settings simply by going to the Wi-Fi option in the main menu.  Canon reports that this issue affects several printer models, including the E, G, GX, iB, iP, MB, MG, MX, PRO, TR, TS, and XK series.

What information is at risk?

Printers store data about the network on it's hard drive.Data about your wireless settings—including your Wi-Fi name, Internet Protocol address, and network password—could all stick around even after resetting your Canon printer.  Once hackers find that information through the menu commands, they could easily log in to the Wi-Fi network and spy on your online activity, including sensitive information like your bank account login, credit card numbers, and personal photos.

Is this a problem with all printers?

BlackCloak CEO Pierson says the current notice is specific to Canon’s printers and “serves as a reminder [of the risks] to everyone with any electronic device that connects to a … network.” That includes other Wi-Fi connected printers and smart devices like Ring doorbells, refrigerators, dryers, and light bulbs.

You might be surprised by all the devices in your house that access and store your Wi-Fi settings—and consequently might leave your data vulnerable.  “Wi-Fi-connected devices have proliferated, and [they include] things that we may not think of,” says Alex Hamerstone, a director at security consulting firm TrustedSec.  “A lot of low-priced consumer electronics from previously unknown manufacturers have Wi-Fi access now, and I would be more worried about those.”

Steps to Safely Dispose of Printers

Before you throw away, donate, or even send your printer in for repair, you should always perform a factory reset to erase all stored informationThe specific steps for a factory reset will vary depending on your printer model.  Still, the reset function resides under the “General” or “Setup” setting in the main menu.

Canon printers

For Canon printers, follow these steps for a factory reset:

  1. Canon printersGo to the Setup option in the main menu.
  2. Select Device settings > OK, then select Reset settings > OK.
  3. Find Reset, then choose OK.
  4. Select Yes to restore the printer to factory settings.

In addition, users with one of the affected Canon printers must follow these additional steps to remove their Wi-Fi data.

  1. In the menu, go to Reset Settings> Reset All.
  2. Enable the wireless LAN.
  3. Follow the first step again: Reset settings > Reset all.

If you have a Canon printer model that does not have the “Reset all settings” function, do this instead:

  1. Select Reset LAN settings.
  2. Enable the wireless LAN.
  3. Select Reset LAN settings one more time.

HP printers

For HP LaserJet Pro 4001n printers, follow these steps from HP for a factory reset:

  1. HP printersTurn Off the Printer: Turn the printer completely turned off.
  2. Turn On the Printer: Turn the printer back on and wait for the HP logo to appear on the screen.
  3. Access the Preboot Menu: As soon as the HP logo appears, press and hold the “Cancel” button (usually marked with an “X”) until the “Preboot” menu appears on the display.
  4. Navigate to Administrator Settings: Use the arrow buttons to navigate to “Administrator” and press the “OK” button.
  5. Restore Factory Settings: In the “Administrator” menu, find and select “Restore Factory Settings.” Confirm your choice when prompted.  The printer will begin restoring factory settings.
  6. Wait for the Process to Complete: The printer will restart during this process.  Wait until it fully restarts and displays the home screen.

Additional Tips for Printer Security

  • Disable or limit the printer’s network connectivity, such as Wi-Fi, Bluetooth, or cloud services, if you don’t use them.
  • You can also turn off the printer’s memory or hard drive to erase your data after printing.
  • Enable the printer’s password, PIN, or biometric authentication to prevent anyone from accessing its data without permission.
  • Keep your printer’s software up to date.  Patches will close any security vulnerabilities that hackers could exploit.
  • Avoid connecting your printer to public Wi-Fi, which could make it vulnerable to spyware and other security risks.

rb-

Ensuring the security of your personal data extends beyond computers and smartphones to include often-overlooked devices like printers. Following the steps outlined in this article, you can effectively decommission your printer and protect sensitive information from potential cyber threats. Stay vigilant, keep your devices updated, and always perform a factory reset before disposing of any electronic device. Secure your printer today to safeguard your data and maintain your online privacy.

 

Related article

 

Ralph Bach has been in IT for a while and has blogged from the Bach Seat about IT, careers, and anything else that has caught my attention since 2005.  You can follow me on Facebook or Mastodon.  Email the Bach Seat here.

HP Greedflation

GHP Greedflationreedflation prevails more among companies with near-monopolies. In such instances, customers have little choice but to pay the listed price for the good or service due to limited alternatives. Greedflation price hikes are not tied to a legitimate need for a rise in the cost of a good or service.

HP drives greedflation. HP drive greedflation by continuously releasing software updates for its Dynamic Security system. This system bricks HP printers when they’re used with third-party ink cartridges. Resulting in several lawsuits.

HP greedflation

HP CEO Enrique Lores told CNBC, why the company pushes the maligned software. Ars Technica says that the reason for persistently pushing the hated software, is HP’s aim to transform printing into a subscription-based service. Lores said, “Our long-term objective is to make printing a subscription … This is really what we have been driving.”

Lores states that HP locks users out of using HP printers when loaded with a non-HP ink cartridge to protect customers against potential viruses. Lores claims, “We have seen that you can embed viruses in the cartridges … Through the cartridge, [the virus can] go to the printer, [and then] from the printer, go to the network.”

BSFake claims

Security experts call BS on Lores. The plausibility of a virus in an ink cartridge being used to perpetrate an attack is low. even calling it “wildly implausible even in a lab setting, let alone in the wild.” Ars points out that HP released HP released Dynamic Security released back in 2016. However, the “research” justifying the cartridge threat didn’t come out till 2022. Additionally, HP established a bug bounty program in 2020. The bounty has largely been aimed at identifying third-party cartridges according to Digital Trends. HP claims third-party cartridges violate its intellectual property (IP) and is another argument for bricking consumers’ printers.

HP Cloud manGreedflation – the real reason

The security claim is weak at best. Their decision is to lock their customers HP’s ecosystem to boost profits. Lores told Ars… this customer doesn’t print enough or doesn’t use our supplies, it’s a bad investment.”

HP’s Instant Ink plan is an example of a subscription service. The Instant Ink plan charges $1.49 per month to print 10 pages, in addition to the cost of buying your printer. Additional pages are available in sets of 10-15 pages, for $1.00 more per set. The cost to the user rises to $27.99 per month on top of the $549.00 base price for a low-volume printer like the HP Color LaserJet Pro MFP M283fdw, plus shipping.

rb-

So, after 3 years of service, you end up paying HP $1,367 for the purchase price for the rights to use your $549 printer. That is 2.5 times the cost subscription over the purchase price.

I know what this customer thinks of this HP greedflation.

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Feds Nab Printer Toner Firms for Fraud

Feds Nab Printer Toner Firms for FraudFollowers for the Bach Seat know that printer ink is one of the most expensive materials on earth. Well, the U.S. Department of Justice just prosecuted one of the worst examples of the sky-high price of printer toner. The DOJ announced that Gilbert N. Michaels of West Los Angeles was sentenced to 48 months in federal prison. He was convicted of orchestrating a decades-long, multimillion-dollar telemarketing scheme that defrauded more than 50,000 victims by selling printer toner cartridges.

ecades-long, multimillion-dollar telemarketing schemeAccording to the DOJ, his firms, IDC Servco and Mytel International, with the assistance of boiler room call center operators, fraudulently sold over a six-year span more than $126 million worth of printer toner cartridges throughout the United States. Michaels’ companies handled the billing and shipping of the toner. He charged the boiler rooms at or above retail prices for the toner they were selling to victims. Michaels provided price catalogs to the boiler rooms to use in making sales. The catalogs listed the price of the toner at up to five to 10 times the retail price. Many of the victims already were receiving toner at no additional charge under their existing contracts for copiers and printers.

Fake printer toner prices increases

To pull off the scam, the telemarketers would pretend to be representatives of toner-supply companies many of the businesses already had contracts with. The telemarketers would then tell the victims that the price of printer toner had increased. The fake sales reps told the victims they could buy the toners at the previous, lower price, prosecutors said.

boiler room call center operatorsBelieving they were dealing with their regular suppliers, the victims would sign order confirmation forms. IDC would then ship toner to victims along with highly inflated invoices. When the victim businesses realized they had been scammed, they called IDC to complain. The victims were typically told that IDC could not cancel the order or refund money because the victims had signed order confirmation forms. IDC also failed to disclose its relationships to the telemarketing companies that brokered the fraudulent deals.

IDC would threaten legal action or turn them over to collection agencies, prosecutors said. If IDC did agree to take the toner back, it would demand significant “restocking fees,” prosecutors said.

Not the first fraud conviction

Not the first fraud convictionMichaels’s operation dates back to the 1970s. This is not his first run-in with the DOJ. Michaels and his companies were under scrutiny in 1988. At that time, the companies were reprimanded for making false statements. They were forced to use an independent sales company to sell printer toner. 

As part of the sentencing, Michaels was ordered to pay a $200,000 fine. His net worth is said to be $6.7 million. Ciaran McEvoy, the spokesperson for the US Attorney’s Office in Los Angeles, said, “Mr. Michaels led a conspiracy whose deceptive practices were particularly damaging to the small business community.” 

Other defendants

Six other defendants were also found guilty along with Michaels:

  • James R. Milheiser of CA who owned and/or controlled Material Distribution Center, PDM Marketing, Bird Coop Industries, Inc., and Copier Products Center. He was convicted of conspiracy and mail fraud.
  • Francis S. Scimeca of CA owned Supply Central Distribution, Inc. and Priority Office Supply, was convicted of conspiracy and mail fraud.
  • Leah D. Johnson of CO who owned Capital Supply Center and LJT Distribution, Inc.
  • Jonathan M. Brightman, of CA and owner of Copy Com Distribution, Inc.; Independent Cartridge Supplier; and Corporate Products.
  • Sharon Scandaliato Virag owned XL Supply, Inc.
  • Tammi L. Williams, office manager at Elite Office Supply, and worked at Specialty Business Center, Rancho Office Supply, and Select Imaging Supplies.

Stay safe out there!

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.

Earth Day 2021

Earth Day 2021Earth Day is April 22nd. It is the 51st Earth Day. Earth Day is “celebrated around the world when people take time to appreciate humankind’s connection to the Earth and to raise awareness of our environmental challenges,” according to the Earth Day Initiative.

environmental protectionMore than 1 billion people now participate in Earth Day activities each year. Earth day is the largest civic observance in the world. At the first Earth Day in 1970, concerned citizens gathered across the country to learn about environmental degradation. The activism that followed led to the passing of the Clean Air Act and Clean Water Act. These are still landmark legislation in environmental protection.

How to commemorate Earth Day

To commemorate Earth Day 2021, here are some ways to make your tech greener.

  • Reuse Old PC’s – Retired hardware can be used for tasks with lower resource requirements. They can also be re-sold – after wiping your data, of course.
  • Responsibly RecycleResponsibly Recycle – The toxic materials in electronic devices can contain dangerous materials like Cadmium, Mercury Hexavalent chromium and Flame retardants.  Be sure to recycle your electronic waste responsibly to avoid leakage of harmful substances into the environment.
  • User more efficient hardwareSolid State Disk Drives (SSDs) – use less energy than traditional HDDs. An SSD can extend your laptop battery life by 30-45 minutes on average. And they are quitier too.
  • Skip the printer – Use online communications. By skipping the printer you can save a tree and save the money you waste on printer ink. According to PricewaterhouseCoopers, the average person makes 10,000 copies or prints annually at the office plus printing at home.
  • Skip the daily commute – Thanks to COVID, most of use are telecommuting now but – skipping the  commuting to the job can reduce green house gas CO2 that causes climate change. And you can save some cash paying for gas.

Stay safe out there !

Related article

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers and anything else that catches his attention since 2005. You can follow him at LinkedInFacebook and Twitter. Email the Bach Seat here.

Ink Profits Driving HP-Xerox Tussle

Ink Profits Driving HP-Xerox TussleWith all of the drama about Xerox trying to take over HP, I got to thinking why? Both firms are dinosaurs with a history of innovation but why are they in a $35 billion tug-o-war now? – Printer Ink. Go to any big-box office supply store – the cost of the ink should shock you. It can be cheaper to buy a new printer than to buy ink for the current printer.

gallon of printer ink can cost you $12,000Bloomberg reports that current ink cartilages are stuffed with foam sponges that hold a fraction of an ounce of cyan, magenta, and yellow dyes that make up the printed image. The printers then spray the contents of the cartridge at 36,000 drops per second on to your paper. Typically the ink needs to be refilled after 165 pages.

The Business Insider calculates that a gallon of printer ink can cost you $12,000. When in cartridge form, ink is more expensive than vintage Champagne and even human blood. When I first wrote about the high cost of printer ink in 2013, ink was estimated to cost 105 times the cost of a latte.

HP DeskJet inkjet printerBI explains that inkjet printers were first developed in the 1960s, and early computer inks were made from food dye and water. Because of this, they would fade after a few months, so companies scrambled to develop a permanent photographic quality dye. In 1988, Hewlett-Packard achieved just that, with the HP DeskJet, the first mass-market inkjet printer, which sold for about $1,000.

BI recently interviewed David Connett. He’s the former editor of The Recycler and activist lobbying for change in the printer-ink industry. Mr. Connett says the reason ink is so expensive is simple: greed – and an outdated razor-and-blades model.

you're trapped in a cyclePrinter manufacturers sell their printers cheaply. They sell the consumables at a very expensive price. And basically, it’s a formula: The cheaper the printer, the more expensive the consumables. BI says that once you’ve bought a printer that uses cartridges you’re trapped in a cycle. You have no choice but to buy their ink cartridges or throw away your printer.

Since a printer is usually a long-term purchase, companies don’t mind selling them at a loss and making the money back through cartridge sales. BI cites the HP Envy 4520 all-in-one printer as an example. It sells for $70 but is estimated to cost $120 to manufacture. The loss HP takes on printers means they need to sell ink cartridges to make a profit, and this model has led to a battleground between printer manufacturers and third-party ink suppliers.

firmware updates to prevent the use of third-party inkThe companies do everything they can to keep you buying official ink cartridges. Manufacturers install microchips into their cartridges and frequently issue firmware updates to prevent the use of third-party ink, which can be more affordable.

Tech firms won’t keep their devices up to date – unless there is a profit in it. Mr. Connett noted that last year, almost 900 firmware upgrades were issued by just nine printer manufacturers, so that’s almost three a day. He speculates there are a couple of reasons for that many updates, “either absolute incompetence, ’cause you’ve got to do it so much, or it is a definite stealth tactic to control the market.

The materials they use, however, cost very little. Mr. Connett says the manufacturing cost of ink is between $70 and $140 a gallon. The printer companies told BI the high costs of ink are due to the research and development that goes into perfecting printer ink. In addition to begin expensive, a lot of the ink you buy never even gets used for printing.

According to 2018 tests by Consumer Reports, more than half the ink you buy could end up lost in maintenance cycles for cleaning the print heads. And printers that use multiple-color ink cartridges also stop working as soon as one color runs out, even if the other colors are still full.

you're getting even less for your moneyBI reports that today you’re getting even less for your money. While the cartridges themselves are the same size and price, they often contain far less ink. The ink in many manufacturers’ cartridges has shrunk from 20 mils to around 5 mils over the past few years, without any reduction in price. The original-size 20 mil cartridges are often still on sale but sold as extra-large cartridges for even more money. And some new cartridges can have only 3 milliliters of ink inside

Mr. Connett concluded,

This product .. can be better engineered … ultimately, this is bad for the consumer, because it’s overpriced and expensive, and it’s bad for the environment because it doesn’t need to be made that way.

BI reached out to HP for comment. HP replied with this statement:

Original HP ink and toner cartridges deliver the best possible printing experience for customers. We make significant investments in R&D each year to provide the highest levels of print quality, safety, and environmental sustainability…

supreme court ruling

Despite a 2017 supreme court ruling, Impression Products, Inc. v. Lexmark International, Inc. in favor of third-party ink, printer manufacturers remain relentless in their drive to eliminate cheaper ink alternatives. They have turned to everything from stealth firmware updates disguised as security patches, to questionable takedown notices on eBay to keep their users hooked on high cost ink.

rb-

In the three decades following HP’s introduction of the desktop laser printer, in 1984, the print division brought in over a half-trillion dollars of revenue.

To further protect their half-trillion dollars of revenue, HP has started an ink subscription program, which will deactivate your cartridges remotely if you print more than your allocated pages.

Related articles

 

Ralph Bach has been in IT long enough to know better and has blogged from his Bach Seat about IT, careers, and anything else that catches his attention since 2005. You can follow him on LinkedInFacebook, and Twitter. Email the Bach Seat here.