Color printers tag their output with serial number and time stamp
Linux - SecurityThis forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Color printers tag their output with serial number and time stamp
Quote:
'Computer security experts, including the consultant Robert Graham,
have noted that color printers leave barely visible microdots
identifying the serial number of the printer, the date and time of the
printing,'
Very old news - I remember stories that supposedly started when colour printers became good enough to do money. Way before the mint started putting anti-forging technology into (particularly plastic) notes.
Yes printer steganography is old news. It's usually a pattern of Y toner. It is actually more visible on certain types of media such as clear acetate films. I actually reported it to a vendor a few years ago as a "fault" and was told what it was.
Last edited by cynwulf; 06-08-2017 at 08:34 AM.
Reason: it's 'steganography'
Tip: The very best(!) thing I ever did was to stop using "ink jet" printers and to invest in a Hewlett-Packard® LaserJet® [color ...] laser printer that was designed to earn its daily bread in real offices. I printed close to 1,500 pages on the cartridge-set that came with it. Then, for about $250 apiece, I can buy replacement cartridge-sets that are rated at 3,500 pages each.
There's a reason why "ink-jet printers are so cheap." It's the Gillette Principle®:
Quote:
"Give 'em the handle, Sell 'em the blades."
The total cost of ownership of my built like a Battleshipreal(!) printer is a tiny fraction of that of the "squirt guns" that it forever replaced.
- - - - -
And since I never plan on printing counterfeit money with it, I really don't give a damn about steganography. (In fact, it actually sounds like a very good idea to me.)
Think about it: "the piece of evidence that just might clinch this gruesome murder case is a computer-printed letter." With essentially no impact on the deliverable document as seen by any and every one of its legitimate, lawful users, a crucial bit of potentially very-important information can be conveyed for law-enforcement purposes. Pretty clever.
Last edited by sundialsvcs; 06-08-2017 at 07:44 PM.
Tip: The very best(!) thing I ever did was to stop using "ink jet" printers and to invest in a Hewlett-Packard® LaserJet® [color ...] laser printer that was designed to earn its daily bread in real offices. I printed close to 1,500 pages on the cartridge-set that came with it. Then, for about $250 apiece, I can buy replacement cartridge-sets that are rated at 3,500 pages each.
There's a reason why "ink-jet printers are so cheap." It's the Gillette Principle®:
The total cost of ownership of my built like a Battleshipreal(!) printer is a tiny fraction of that of the "squirt guns" that it forever replaced.
- - - - -
And since I never plan on printing counterfeit money with it, I really don't give a damn about steganography. (In fact, it actually sounds like a very good idea to me.)
Think about it: "the piece of evidence that just might clinch this gruesome murder case is a computer-printed letter." With essentially no impact on the deliverable document as seen by any and every one of its legitimate, lawful users, a crucial bit of potentially very-important information can be conveyed for law-enforcement purposes. Pretty clever.
Note also that information that gets sent to the printer is usually stored in a cache. The way it works your OS creates a print job that goes to the spooler, and all the while that job gets stored in a cache on the printer as it's being queued. Usually when the print out is completed the spool file (job) is removed from the spooler, but not all printers delete the cache, so be aware of that if printing out sensitive information.
* The print spooler is the process that manages the printing in the background
Last edited by justmy2cents; 06-14-2017 at 02:23 PM.
There's a reason why "ink-jet printers are so cheap." It's the Gillette Principle®
The "Gillette Principle" very much applies to laser printers and toner sales as well.
Quote:
Originally Posted by sundialsvcs
of the "squirt guns" that it forever replaced.
The "squirt guns" are still in use - powering $1M plus industrial digital printers.
Quote:
Originally Posted by sundialsvcs
And since I never plan on printing counterfeit money with it, I really don't give a damn about steganography. (In fact, it actually sounds like a very good idea to me.) [...] Think about it
A "very good idea" is debatable. Printer steganography was developed primarily to deter forgers and to provide trace-ability to the printer's serial number. This should would lead to the purchaser of the printer and give a lead from there. However if the retailer doesn't record where the serial numbers are sold onto, the trail ends there.
Printers are not by default secured, licenced equipment registered to one individual and even if it were the case, you'd still have to prove beyond all reasonable doubt as to who printed the document and if they did so for nefarious purposes, so any "evidence" based on printer steganography would be shaky at best.
The "Gillette Principle" very much applies to laser printers and toner sales as well.
The "squirt guns" are still in use - powering $1M plus industrial digital printers.
A "very good idea" is debatable. Printer steganography was developed primarily to deter forgers and to provide trace-ability to the printer's serial number. This should would lead to the purchaser of the printer and give a lead from there. However if the retailer doesn't record where the serial numbers are sold onto, the trail ends there.
Printers are not by default secured, licenced equipment registered to one individual and even if it were the case, you'd still have to prove beyond all reasonable doubt as to who printed the document and if they did so for nefarious purposes, so any "evidence" based on printer steganography would be shaky at best.
I agree that it was an idea that probably sounded better on the drawing board.
I fully well know that ink-jet technology is still in widespread use ... but it is perfectly ridiculous how expensive consumer cartridges are, for the amount of ink that is actually in them and(!) the amount of ink that will actually wind up on a piece of paper. Laser printers are vastly more efficient ... if(!) you buy a model that is built to hold large-size cartridges! (For instance, the printer model that I now use was "superseded" (of course) by another model which looks just like it except that the cartridges are much smaller, hold much less toner, and are more expensive than the ones I can buy.
Don't go to a run-of-the-mill office supply store to buy a printer: go to a local dealer that sells office printers. They will have models that aren't sold in the clone stores.
Last edited by sundialsvcs; 06-15-2017 at 09:53 AM.
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.