Friday Hacker Blogging: Get Doom Running On a Canon PIXMA Printer

Doom

Back in 2014 security researcher found a vulnerability in Canon PIXMA printers. They demonstrated the vulnerability by installing the 1990’s game Doom on the printer.

Canon wireless Pixma printers can be accessed through a web page, for instance to see printer information like ink levels or to update the firmware.

Says the hacker at Context (emphasis added):

This interface does not require user authentication allowing anyone to connect to the interface. At first glance the functionality seems to be relatively benign, you could print out hundreds of test pages and use up all the ink and paper, so what? The issue is with the firmware update process. While you can trigger a firmware update you can also change the web proxy settings and the DNS server. If you can change these then you can redirect where the printer goes to check for a new firmware. So what protection does Canon use to prevent a malicious person from providing a malicious firmware? In a nutshell – nothing, there is no signing (the correct way to do it) but it does have very weak encryption. I will go into the nuts and bolts of how I broke that later in this blog post. So we can therefore create our own custom firmware and update anyone’s printer with a Trojan image which spies on the documents being printed or is used as a gateway into their network. For demonstration purposes I decided to get Doom running on the printer (Doom as in the classic 90s computer game).

And Doom it was:

Canon acknowledged the issue and provided the following statement regarding this issue:

“We thank Context for bringing this issue to our attention; we take any potential security vulnerability very seriously.  At Canon we work hard at securing all of our products, however with diverse and ever-changing security threats we welcome input from others to ensure our customers are as well protected as possible.

We intend to provide a fix as quickly as is feasible.  All PIXMA products launching from now onwards will have a username/password added to the PIXMA web interface, and models launched from the second half of 2013 onwards will also receive this update, models launched prior to this time are unaffected. This action will resolve the issue uncovered by Context.”  

It is a good practice to never connect a printer to the Internet.

If you want to dive deeper into the hacking and learn how Canon’s encryption was broken read the article at Context. This post can be used to discuss about whatever topic you want.

Canon Announces Three New Canon PIXMA Printers For Home or SOHO

Canon Pixma

Canon released three new wireless Canon PIXMA printers for home or small business operations.

Canon press release:

Now is the Ideal Time to Refresh Your Home or Small Business Office Setup with a New Canon PIXMA Printer

MELVILLE, NY, September 2, 2020Over the past few months, you’ve probably added some mileage to your desktop printer – by printing documents for school, work, and/or to help keep children entertained. Continuing the tradition of producing quality printers ideal for both work and play, Canon U.S.A,. Inc., a leader in digital imaging solutions, today announced three new PIXMA printers: the PIXMA TR8620 Wireless Home Office All-in-One Printer, PIXMA TR7020 Wireless All-in-One Printer and the PIXMA TS6420 Wireless All-in-One Printer. Designed with easy connectivity and setup in mind, a sleek and compact design – and the reliability that comes with a Canon PIXMA series printer continues with these latest models.

“In 2020, we have seen the at-home and small business needs of our customers continue to evolve rapidly and Canon is proudly invested in striving to make sure the wants and needs of our various customers are met,” said Tatsuro “Tony” Kano, executive vice president and general manager of the Canon U.S.A., Inc. Imaging Technologies & Communications Group. “These new PIXMA printers are a proof point in our steadfast commitment to making quality imaging products that provide ease and convenience to consumers in their home or small-business offices.”

Beneficial for a makeshift, work-from-home office or at your desk in a business office, the PIXMA TR8620 is the business personal printer to have at your disposal. This model features all the essential printer functions including print, copy, scan and fax as well as an ADF (automatic document feeder) for easy paper handling.

Click here to open the rest of the article

Canon imagePROGRAF PRO-300 Professional Inkjet Printer Announced

Canon ImagePROGRAF PRO-300

Along with the Canon EOS R5, EOS R6 and new lenses, Canon yesterday also announced new professional printer: the Canon imagePROGRAF PRO-300 Inkjet Printer.

The imagePROGRAF PRO-300 Printer will be available later in July 2020 at $899.99. Premium Fine Art Rough paper will also be available later in July.

Key features:

  • Max Resolution: 4800 x 1200 dpi
  • Max Print Size: 13 x 19″ (Sheet Media)
  • Borderless Printing at up to 13″ Wide
  • FINE Print Head (User Replaceable)

Preorders at $899 are open at B&H Photo and Adorama.

Canon press release:

Dear Image Makers: Canon’s New imagePROGRAF Provides Exceptional Quality Prints and Newly Updated Software Solutions

New Premium Fine Art Paper for Professional, Advanced Amateur Photographers and Art Lovers Further Benefitting Image Makers also Introduced

MELVILLE, NY, July 9, 2020After taking the time to create your ideal photo, every creative image maker should look to complete the process with a vibrant print to share for everyone to admire. Completing the lineup of professional printer options from 13 inches through 60 inches, Canon U.S.A., Inc., a leader in digital imaging solutions, unveils today the new 13-inch Canon imagePROGRAF PRO-300 Inkjet Printer along with a new Premium Fine Art Rough paper. Providing an improved workflow and high-quality output within a smaller footprint compared to previous models, this new printer excels at professional printing performance. Combined with the new Premium Fine Art Rough paper that features a textured surface to express the depth of an image, the printer along with the paper introduces a new powerhouse professional imaging duo that meets creators’ demands.

“With the introduction of the Canon imagePROGRAF PRO-300, we are continuing our outstanding tradition of creating great quality printers for a variety of image makers, making it easier to print work at home,” said Tatsuro “Tony” Kano, executive vice president of the Canon U.S.A., Inc. Imaging Technologies & Communications Group. “As the creative responsibilities of our customers have evolved and the importance of preserving historic moments has increased, it is imperative the features Canon integrates into new solutions and consumables meet the needs, wants and asks of our customers.”

Click here to open the rest of the article

Canon Announces Compact And Portable Wireless PIXMA TR150 Printer

PIXMA TR150

Canon released a new, compact and portable wireless printer. The Canon PIXMA TR150 will be available in late March at $199.99. This is a business-oriented product, not really for photography. Preorder at B&H Photo | Adorama.

Canon press release:

Printing Simplified with the New Canon PIXMA TR150 Printer

Wireless1 Printer Provides Exceptional Quality Prints, While Small Size and Optional Battery Allow Portability for Out Of the Office Business Professionals

MELVILLE, NY, March 26, 2020 – Millions of people across the United States routinely work from home.It’s helpful if they, along with people who work from other remote locations, have transportable equipment that can fit into a variety of work-related circumstances. In the spirit of working wherever the business takes you, Canon U.S.A., Inc., a leader in digital imaging solutions, unveils today the new Canon PIXMA TR150 Wireless1 Printer, as well as its optional battery for portability . The Canon PIXMA TR150 printer, when paired with the optional battery (sold separately), provides a lightweight portable option for quality printing needs for the out of the office business professional.

“With their time-consuming schedules, today’s business professionals require products that are easy to use and produce high-quality documents,” said Kazuto Ogawa, president and chief operating officer, Canon U.S.A., Inc. “The new Canon PIXMA TR150 printer can help business professionals in and out of the office to conduct business efficiently, leveraging Canon print technologies and features, including an OLED screen and Wi-Fi®1 connectivity.”

Printing Where and When Needed
If your office is the kitchen table or the living room sofa, bulky and clunky office equipment would not be feasible. Powered by USB charging or the optional battery, the Canon PIXMA TR150 printer can be your “whenever and wherever business calls” printer. Coming in at 4.5 pounds2 and approximately 12.7 inches x 7.3 inches x 2.6 inches, the Canon PIXMA TR150 printer features a 1.44 inch OLED display to help users easily install, set-up and connect the printer to compatible mobile devices. The screen also alerts the user to any troubleshooting issues such as paper needing to be refilled or low ink, helping to alleviate certain additional stresses that could occur during crunchtime moments.

Click here to open the rest of the article

Save On Canon PIXMA Printers (MG2525 and TS5120, starting $44)

Canon Pixma

B&H Photo has deals on two Canon PIXMA printers.

  • Canon PIXMA MG2525 All-in-One Inkjet Printer (Black) on sale at $44 (reg. $88)
  • Canon PIXMA TS5120 Wireless All-in-One Inkjet Printer (Black) on sale at $49 (reg. $99)

All 4th July deals at B&H Photo are listed here.

Noteworthy Kickstarter projects:

  1. DUO Daypack, quick access camera bag with lifetime warranty
  2. Kamlan 50mm f/1.1 lens for $199
  3. Peak Design super light travel tripod

Selected deals:

More hand-picked deals are listed here.

Authorised Canon retailer B&H Photo has discounted EOS 5D Mark IV and EOS 6D Mark II bundles on offer for the holidays.

We offer 10% discount to subscriptions to Pixpa all-in-one platform for photographers.

Today’s Gold Box and one day only deals at Amazon USAmazon DEAmazon UKB&H Photo, eBayAdorama.

Canon Europe stores have a cash back promotions going on:

Refurbished lenses and DSLRs at Canon Store (best deals to be found here)

Save $10 on Luminar 4 and/or Aurora HDR 2019 using our code “WATCH” at checkout.