Friday Hacker Blogging: Get Doom Running On a Canon PIXMA Printer

Doom

Back in 2014 security researcher found a vulnerability in Canon PIXMA printers. They demonstrated the vulnerability by installing the 1990’s game Doom on the printer.

Canon wireless Pixma printers can be accessed through a web page, for instance to see printer information like ink levels or to update the firmware.

Says the hacker at Context (emphasis added):

This interface does not require user authentication allowing anyone to connect to the interface. At first glance the functionality seems to be relatively benign, you could print out hundreds of test pages and use up all the ink and paper, so what? The issue is with the firmware update process. While you can trigger a firmware update you can also change the web proxy settings and the DNS server. If you can change these then you can redirect where the printer goes to check for a new firmware. So what protection does Canon use to prevent a malicious person from providing a malicious firmware? In a nutshell – nothing, there is no signing (the correct way to do it) but it does have very weak encryption. I will go into the nuts and bolts of how I broke that later in this blog post. So we can therefore create our own custom firmware and update anyone’s printer with a Trojan image which spies on the documents being printed or is used as a gateway into their network. For demonstration purposes I decided to get Doom running on the printer (Doom as in the classic 90s computer game).

And Doom it was:

Canon acknowledged the issue and provided the following statement regarding this issue:

“We thank Context for bringing this issue to our attention; we take any potential security vulnerability very seriously.  At Canon we work hard at securing all of our products, however with diverse and ever-changing security threats we welcome input from others to ensure our customers are as well protected as possible.

We intend to provide a fix as quickly as is feasible.  All PIXMA products launching from now onwards will have a username/password added to the PIXMA web interface, and models launched from the second half of 2013 onwards will also receive this update, models launched prior to this time are unaffected. This action will resolve the issue uncovered by Context.”  

It is a good practice to never connect a printer to the Internet.

If you want to dive deeper into the hacking and learn how Canon’s encryption was broken read the article at Context. This post can be used to discuss about whatever topic you want.

Canon Announces Compact And Portable Wireless PIXMA TR150 Printer

PIXMA TR150

Canon released a new, compact and portable wireless printer. The Canon PIXMA TR150 will be available in late March at $199.99. This is a business-oriented product, not really for photography. Preorder at B&H Photo | Adorama.

Canon press release:

Printing Simplified with the New Canon PIXMA TR150 Printer

Wireless1 Printer Provides Exceptional Quality Prints, While Small Size and Optional Battery Allow Portability for Out Of the Office Business Professionals

MELVILLE, NY, March 26, 2020 – Millions of people across the United States routinely work from home.It’s helpful if they, along with people who work from other remote locations, have transportable equipment that can fit into a variety of work-related circumstances. In the spirit of working wherever the business takes you, Canon U.S.A., Inc., a leader in digital imaging solutions, unveils today the new Canon PIXMA TR150 Wireless1 Printer, as well as its optional battery for portability . The Canon PIXMA TR150 printer, when paired with the optional battery (sold separately), provides a lightweight portable option for quality printing needs for the out of the office business professional.

“With their time-consuming schedules, today’s business professionals require products that are easy to use and produce high-quality documents,” said Kazuto Ogawa, president and chief operating officer, Canon U.S.A., Inc. “The new Canon PIXMA TR150 printer can help business professionals in and out of the office to conduct business efficiently, leveraging Canon print technologies and features, including an OLED screen and Wi-Fi®1 connectivity.”

Printing Where and When Needed
If your office is the kitchen table or the living room sofa, bulky and clunky office equipment would not be feasible. Powered by USB charging or the optional battery, the Canon PIXMA TR150 printer can be your “whenever and wherever business calls” printer. Coming in at 4.5 pounds2 and approximately 12.7 inches x 7.3 inches x 2.6 inches, the Canon PIXMA TR150 printer features a 1.44 inch OLED display to help users easily install, set-up and connect the printer to compatible mobile devices. The screen also alerts the user to any troubleshooting issues such as paper needing to be refilled or low ink, helping to alleviate certain additional stresses that could occur during crunchtime moments.

Click here to open the rest of the article

Save On Canon PIXMA Printers (MG2525 and TS5120, starting $44)

Canon Pixma

B&H Photo has deals on two Canon PIXMA printers.

  • Canon PIXMA MG2525 All-in-One Inkjet Printer (Black) on sale at $44 (reg. $88)
  • Canon PIXMA TS5120 Wireless All-in-One Inkjet Printer (Black) on sale at $49 (reg. $99)

All 4th July deals at B&H Photo are listed here.

Noteworthy Kickstarter projects:

  1. DUO Daypack, quick access camera bag with lifetime warranty
  2. Kamlan 50mm f/1.1 lens for $199
  3. Peak Design super light travel tripod

Selected deals:

More hand-picked deals are listed here.

Authorised Canon retailer B&H Photo has discounted EOS 5D Mark IV and EOS 6D Mark II bundles on offer for the holidays.

We offer 10% discount to subscriptions to Pixpa all-in-one platform for photographers.

Today’s Gold Box and one day only deals at Amazon USAmazon DEAmazon UKB&H Photo, eBayAdorama.

Canon Europe stores have a cash back promotions going on:

Refurbished lenses and DSLRs at Canon Store (best deals to be found here)

Save $10 on Luminar 4 and/or Aurora HDR 2019 using our code “WATCH” at checkout.

Canon Announced New PIXMA G-Series MegaTank Printers (starting $250)

Pixma G-series

The new PIXMA G-series printers are available today, with the PIXMA G6020 All-In-One Printer available for $299.99 and the PIXMA G5020 MegaTank Single Function Printer for $249.99.

Pre-order: B&H Photo | Adorama | Amazon

Press release:

Ease And Convenience Is Now Synonymous With Your Printer: Canon Announces Two New PIXMA G-Series MegaTank Printers

Providing Wireless1 Connectivity, Now is the Time to Upgrade Your Printer to a Continuous Ink Supply System

MELVILLE, NY, June 6, 2019 – In a time where it seems like digital is king, we cannot forget that 69% of Americans feel overwhelmed about the constant barrage of digital information2. It’s time to bring it back to basics and embrace the benefits of print. In that spirit, Canon U.S.A., Inc., a leader in digital imaging solutions, is excited to announce the new PIXMA G6020 All-In-One Printer and the PIXMA G5020 MegaTank Single-Function Printer. These new PIXMA G-series MegaTank printers are further extending the current lineup and are ideal for high-print volume printing with low maintenance.

The magic of PIXMA G-series MegaTank printers lies with the continuous ink supply system. Boasting ink bottles with spill-resistant tops, the printer system is designed to provide seamless and clean usability at home and in the office. With black ink providing up to 6,000 pages3 per bottle and total color ink combination providing up to 7,700 pages3, the printers provide a high-page yield, making them cost-effective and convenient for the consumer. Further adding to the flexibility and convenience of the two new MegaTank models is automatic two-sided printing along with a 350 page paper capacity when using both the front and rear trays. In addition, these two new printers feature faster print speeds than the previous generation of MegaTank printers, producing 13 impressions per minute (“IPM”) for black and white4 and 6.8 IPM for color4

“Listening to our customer’s printing needs is a top priority for our company as we continue to bring new innovations to our products and the marketplace, ” said Kazuto Ogawa, president and chief operating officer, Canon U.S.A., Inc. “I am confident that today’s product introductions will deliver upon the needs for a continuous ink system and easier wireless technology.”

The PIXMA G6020 and PIXMA G5020 printers both feature wireless connectivity via Wi-Fi®1 and, for users of compatible mobile devices, the added benefit of access to the Canon PRINT Inkjet/SELPHY app5, allowing for easy setup and basic operations on compatible smartphone devices. Through the Canon PRINT app, users can easily access PIXMA Cloud Link6 to print photos and documents from popular online social platforms and services, such as Instagram®, Facebook®, Twitter®, Flickr®, Photobucket®, Dropbox®, Evernote®, Google Drive™ and Microsoft® OneDrive®. 

The PIXMA G6020 printer also supports the Apple AirPrint® software feature7 and the Google Cloud Print™ web printing service8 for printing from the Gmail™ email service and the Google Docs™ web-based word processing program8 on a compatible mobile device and from the Google Chrome™ browser for Mac®, Windows®, Linux® and Chrome OS™ operating systems.

The new PIXMA G-series printers are available today, with the PIXMA G6020 All-In-One Printer available for $299.999and the PIXMA G5020 MegaTank Single Function Printer for $249.999. For more information and a detailed listing of all product features, please visit: shop.usa.canon.com/gseries.

Click here to open the rest of the article

Hot Deal: Canon PIXMA PRO-100 Professional Photo Printer – $79.99 (reg. $399)

Canon PIXMA PRO-100

At a glance:

  • 4800 x 2400 dpi
  • Print 8 x 10″ in 51 Seconds
  • Wi-Fi, Ethernet, AirPrint, PictBridge
  • Print Sizes up to 13 x 19″
  • 8 Ink Cartridges Including 3 Monochrome
  • CD, DVD, Blu-ray Printing
  • Print Studio Pro for Photoshop, DPP

For NAB 2019, B&H Photo has an excellent deal on the Canon PIXMA PRO-100 Professional Photo Printer. You can get the Canon PIXMA PRO-100 for $79.99 by applying code BHNAB19 at checkout and after $250 mail-in rebate (instructions).

More NAB 2019 specials and offers by B&H Photo are listed here. Some deals might need code BHNAB19 at checkout.

More selected deals:

More hand-picked deals are listed here.

Authorised Canon retailer B&H Photo has discounted EOS 5D Mark IV and EOS 6D Mark II bundles on offer for the holidays.

We offer 10% discount to subscriptions to Pixpa all-in-one platform for photographers.

Today’s Gold Box and one day only deals at Amazon USAmazon DEAmazon UKB&H Photo, eBayAdorama.

Canon Europe stores have a cash back promotions going on:

Refurbished lenses and DSLRs at Canon Store (best deals to be found here)

Save $10 on Luminar 4 and/or Aurora HDR 2019 using our code “WATCH” at checkout.

Hot Deal: Canon PIXMA PRO-100 Professional Photo Printer – $59 (and more limited time offers)

Canon PIXMA PRO-100

Canon PIXMA Pro-100 at a glance:

  • 4800 x 2400 dpi
  • Print 8 x 10″ in 51 Seconds
  • Wi-Fi, Ethernet, AirPrint, PictBridge
  • Print Sizes up to 13 x 19″
  • 8 Ink Cartridges Including 3 Monochrome
  • CD, DVD, Blu-ray Printing
  • Print Studio Pro for Photoshop, DPP

B&H Photo has a special for their Depth of Field Show. You can get the Canon PIXMA PRO-100 Wireless Professional Inkjet Photo Printer for $59 after $250 mail-in rebate (instructions) and by using code BHDOF19 at checkout.

There is more in occasion of Depth of Field Show (don’t forget to use code BHDOF19):