Instant Guide

Can hackers set your printer on fire?

Researchers from Columbia University demonstrate how a software flaw could put your printer at risk — not to mention your entire computer network

Thanks to a security flaw, tens of millions of Hewlett-Packard LaserJet printers may be vulnerable to remote hijacking. A team of researchers from Columbia University claims that hackers may be able to control these printers from afar and — rather horrifyingly — even set them on fire. Here's what you should know:

How could hackers control my printer?Security experts have long theorized that printers could be exploited just like any other device connected to the internet. "Each time the printer accepts a print job from a computer," it also looks for software updates, says Kim Zetter at Wired. And these HP printers don't "require a digital signature to verify that an upgrade is authentic." That means "attackers can send specially crafted files to the printer that contain malicious code." In a live demonstration, Columbia researchers quickly searched the web and found 40,000 devices that could be prone to infection.

What could hackers do once they're in?In one demonstration, the researchers sent "instructions that would continuously heat up the printer's fuser — which is designed to dry ink once it's applied to paper — eventually causing the paper to turn brown and smoke," says Bob Sullivan at MSNBC. In that demonstration, the printer's thermal switch shut down the machine before a real fire could start, but researchers believe other printers are more vulnerable.

Are there other concerns?Yes, including the risk of identity theft. For instance, if you left your tax forms in your device's scanner, a hacker could potentially copy them. But the real vulnerability, researchers say, is that "printers on a computer network are nearly always trusted by other computers." A hacked printer "could act as a beachhead to attack a company's network that was otherwise protected by a firewall."   

What does HP say?In a press release, the company blasted these revelations as "sensational and inaccurate," and said that "no customer has reported unauthorized access." HP also said that all its printers have thermal switches that would prevent fires. Still, HP did confirm the existence of a potential vulnerability. "In other words," says Jason Mick at Daily Tech, "HP admits that its printers could, in theory, be taken over by hackers, but it doesn't believe that to have happened yet."

Sources: Daily Tech, Fox News, MSNBC, Wired

Recommended

The two-man space race
Jeff Bezos.
Opinion

The two-man space race

Meat supplier JBS paid $11 million ransom following cyberattack
A JBS facility.
$$$$$

Meat supplier JBS paid $11 million ransom following cyberattack

Senate passes sweeping bill to boost U.S. tech industry
Senate Majority Leader Chuck Schumer.
in the senate

Senate passes sweeping bill to boost U.S. tech industry

Why utilities should be dumber
A factory worker.
Talking Points

Why utilities should be dumber

Most Popular

Bernie Sanders wants to know if cannabis reporter is 'stoned' right now
Bernie Sanders.
Sounds dope

Bernie Sanders wants to know if cannabis reporter is 'stoned' right now

SCOTUS deals blow to sentencing reform
The Supreme Court.
Picture of Bonnie KristianBonnie Kristian

SCOTUS deals blow to sentencing reform

Georgia election workers reportedly received a 'torrent' of threats
Trump rally.
The big lie

Georgia election workers reportedly received a 'torrent' of threats