[IPP] FYI - IPP exposure to open internet

[IPP] FYI - IPP exposure to open internet

Michael Sweet msweet at msweet.org
Wed Jun 24 16:11:49 UTC 2020


Smith,

Very few - I am aware of a few office MFPs that use CUPS internally, and there are network print services that implement the CUPS-Get-Printers operation for AirPrint (to lookup a printer by its printer-id value - it is used for Bluetooth beacons), but the numbers of devices and spread of version numbers sounds more like Internet-facing Linux servers to me.


> On Jun 24, 2020, at 12:05 PM, Kennedy, Smith (Wireless & IPP Standards) <smith.kennedy at hp.com> wrote:
> 
> Do many printers implement the CUPS attributes?
> 
> It would be interesting to learn what motivated the owners to put their printers or print servers on public networks.
> 
> Cheers,
> Smith
> ---
> Smith Kennedy
> smith.kennedy at hp.com
> 
> 
>> On Jun 24, 2020, at 6:53 AM, Michael Sweet via ipp <ipp at pwg.org> wrote:
>> 
>>  Chris,
>> 
>> Thanks for forwarding this!
>> 
>> Looks like the bulk of the open "devices" are CUPS servers, which would have needed to be explicitly configured to allow remote access - the default is localhost-only, then local subnets (for regular printer sharing), then whole-internet (if you want things wide open...)
>> 
>> 
>> > On Jun 24, 2020, at 12:09 AM, Rizzo, Christopher via ipp <ipp at pwg.org> wrote:
>> > 
>> > Maybe you have already seen this. Forwarding in case it needs discussion
>> > 
>> > https://www.shadowserver.org/news/open-ipp-report-exposed-printer-devices-on-the-internet/
>> > 
>> > 
>> > Chris
>> > 
>> > Christopher Rizzo
>> > Xerox Corporation
>> > GDG/Discovery/Advance Technology
>> > 26600 SW Parkway Ave.
>> > Wilsonville, OR 97070-9251
>> > Phone: (585) 314-6936
>> > Email: Christopher.Rizzo at xerox.com
>> > 
>> > "The realization came over me with full force that a good part of the remainder of my life was going to be spent in finding errors in my own programs."
>> > -Maurice Wilkes, Memoirs of a Computer Pioneer
>> > _______________________________________________
>> > ipp mailing list
>> > ipp at pwg.org
>> > https://www.pwg.org/mailman/listinfo/ipp
>> 
>> ________________________
>> Michael Sweet
>> 
>> 
>> 
>> _______________________________________________
>> ipp mailing list
>> ipp at pwg.org
>> https://www.pwg.org/mailman/listinfo/ipp

________________________
Michael Sweet





More information about the ipp mailing list