I was curious about how this was being done. My first assumption was karma farming, but the next thought was that you have to log in to these systems to print a ticket, and even if an /r/antiwork...
I was curious about how this was being done. My first assumption was karma farming, but the next thought was that you have to log in to these systems to print a ticket, and even if an /r/antiwork poster hates their underpaying job, they also aren't going to just throw their income away for internet points.
There is more info on the Greynoise blog: https://www.greynoise.io/blog/receiptprintjacking See also: http://hacking-printers.net/wiki/index.php/Port_9100_printing
I'm actually surprised it wasn't just a brute force on the logins. I'd wager that a solid 50% of them use 1234 as the admin password. Another 20% of the "clever" ones doing 4321. /halfjoke
I'm actually surprised it wasn't just a brute force on the logins.
I'd wager that a solid 50% of them use 1234 as the admin password. Another 20% of the "clever" ones doing 4321. /halfjoke
I wrote that comment in an odd way. I left understanding how the printouts are happening. The "That left me wondering how it was happening" was about the second thought.
I wrote that comment in an odd way. I left understanding how the printouts are happening. The "That left me wondering how it was happening" was about the second thought.
Ah, gotcha. The way your comment was originally written, it read as if you didn't understand how the hack worked, and thought it might still be people just karma farming. :P I'll remove the...
Ah, gotcha. The way your comment was originally written, it read as if you didn't understand how the hack worked, and thought it might still be people just karma farming. :P
I'll remove the article quote, but leave the rest of my reply up though, since it has some interesting additional info if people are curious for more.
I was curious about how this was being done. My first assumption was karma farming, but the next thought was that you have to log in to these systems to print a ticket, and even if an /r/antiwork poster hates their underpaying job, they also aren't going to just throw their income away for internet points.
There is more info on the Greynoise blog:
https://www.greynoise.io/blog/receiptprintjacking
See also:
http://hacking-printers.net/wiki/index.php/Port_9100_printing
I'm actually surprised it wasn't just a brute force on the logins.
I'd wager that a solid 50% of them use 1234 as the admin password. Another 20% of the "clever" ones doing 4321. /halfjoke
I wrote that comment in an odd way. I left understanding how the printouts are happening. The "That left me wondering how it was happening" was about the second thought.
Ah, gotcha. The way your comment was originally written, it read as if you didn't understand how the hack worked, and thought it might still be people just karma farming. :P
I'll remove the article quote, but leave the rest of my reply up though, since it has some interesting additional info if people are curious for more.