[Inori]

"A pissed off high school student who fucked his future in computing science" from the UK recently automated an IoT printer-hacking shitstorm. Stackoverflowin's (known on Twitter as @lmaostack) program affected over 150,000 printers worldwide, which stack didn't expect to happen. I guess this just goes to show how many business owners/IT departments don't know what the fuck they're doing when it comes it IoT.

https://motherboard.vice.com/en_us/artic...gs-is-shit

[Blink]

It's been shown before that printers generally don't have the best security.

IoT device makers need to get their shit together.

[Mr.Kurd]

I don't trust anyway the tools which connect to the internet.

[Blink]

I don't trust anyway the tools which connect to the internet.

What?
As in connecting the printer?

Those things shouldn't work over WAN anyway, wtf is wrong with these companies?

[Mr.Kurd]

I don't trust anyway the tools which connect to the internet.

What?
As in connecting the printer?

Those things shouldn't work over WAN anyway, wtf is wrong with these companies?

I don't know Ask the companies.
Man they just want making moneys.
You know the solution for a lot of patient have been found but the biggest companies won't publish it because they are poor and need more money

[mothered]

I've always said "The moment you establish an Internet connection, your anonymity Is no longer In your control".

And those printers that have an Internal HDD that may have kept Credit Card Images, Drivers Licenses etc (although some are In encrypted form) that employees have simply copied for personal reasons, may no longer be personal.

[Inori]

It's been shown before that printers generally don't have the best security.

IoT device makers need to get their shit together.

I've always said "The moment you establish an Internet connection, your anonymity Is no longer In your control".

Granted, the manufacturers could do a better job of securing their devices, but they can only do so much if the end user decides to do something stupid.

[mothered]

but they can only do so much if the end user decides to do something stupid.

Absolutely.

A device Is only as secure as the person who operates It. Users need to be cautious with the "Task" they're performing.
T= Training.
A= Awareness.
S= Skill set.
K= Know-how.

And In a corporate environment, a lot of the above comes from the lack of company policies to educate their employees.

[Jiggly]

but they can only do so much if the end user decides to do something stupid.

Absolutely.

A device Is only as secure as the person who operates It. Users need to be cautious with the "Task" they're performing.
T= Training.
A= Awareness.
S= Skill set.
K= Know-how.

And In a corporate environment, a lot of the above comes from the lack of company policies to educate their employees.

Holy crap, I didn't even realise this was a possibility. It seems obvious now but I'm sure I've made these mistakes somewhere along the line.

Ironically I have to create a policy brief for a class project, it would be amusing to see if I could use this as a suggestion for mine xD

[mothered]

but they can only do so much if the end user decides to do something stupid.

Absolutely.

A device Is only as secure as the person who operates It. Users need to be cautious with the "Task" they're performing.
T= Training.
A= Awareness.
S= Skill set.
K= Know-how.

And In a corporate environment,  a lot of the above comes from the lack of company policies to educate their employees.

Holy crap, I didn't even realise this was a possibility. It seems obvious now but I'm sure I've made these mistakes somewhere along the line.

Ironically I have to create a policy brief for a class project, it would be amusing to see if I could use this as a suggestion for mine xD

The T.A.S.K (as elaborated above) Is something I formulated, mainly for the purpose of an "easy-to-remember" approach when educating others on cyber security, prevention of social engineering etc.

I didn't plagiarize It from anyone. You can well and truly use It. Simply add your policies and/or recommendations to each category.