Canon mulls security concerns after hacker gets Doom running on a Pixma printer

hacker gets doom running canon printer
White hat security researcher Michael Jordon has managed to get id Software’s genre-defining first-person shooter Doom running on a wireless Canon Pixma printer.  The project, which took four months to get up and running, was undertaken to demonstrate a security vulnerability in the printer’s web interface that is exemplary of problems that could potentially plague the emerging “Internet of Things” (via BBC News).

The Canon Pixma uses a Web interface so that owners can check on its status remotely. Mr. Jordon found that the interface does not require a username or password, so anyone could check on the device’s status once they found it. This did not seem like a problem until he realized that it is also possible to update the device’s firmware through the remote Web interface. Although the firmware is encrypted, Mr. Jordon was able to crack it and thus convince the printer to accept his own, re-written firmware.

That’s when he got the idea to run Doom, which has become a de facto “Hello, World!” program for hackers to demonstrate mastery over a given device. Doom has been implemented on everything from ATMs to graphic calculators. “Running Doom, that’s real proof you control the thing,” Jordon told the BBC.

Related: The return of Doom will be teased in an upcoming beta

Although the printer’s 32-bit ARM processor and 10MB of memory was more than sufficient in terms of raw power, the lack of a conventional operating system meant that it took months of coding and experimentation so the game could deal with the printer’s idiosyncrasies. The color palette is off, but the game works sufficiently to prove Mr. Jordon’s point, and he has no plans to further optimize it.

In response to Mr. Jordon’s work, Canon has promised “to provide a fix as quickly as is feasible,” adding a username and password to all future Pixma printers and providing an update for all models launched from the second half of 2013 onward. A quick search on the Shodan search engine reveals that there are thousands of unsecured printers out there on the Web, though Mr. Jordon has found no evidence of anyone abusing the loophole.

For a more technically in-depth explanation of how Jordon hacked the printers’s encryption, check out his blog post over at the site of his employer, Context Information Security.

Smart Home

Airbnb says sorry to guest for how it dealt with undisclosed security camera

An Airbnb guest recently found a surveillance camera in his rental apartment that hadn't been properly disclosed in the listing. The firm admits its initial response to the guest's complaint was poor, but has since made amends.

Lost your router? Here's how to find its IP address to help track it down

Changing the login information for your router isn't always easy, that's why so many have that little card on the back. But in order to use it, you need to know where to go. Here's how to find the IP address of your router.
Emerging Tech

The best 3D printers for 2019

On the hunt for a new 3D printer? We've got your back. Whether you're a beginner or a seasoned veteran, this list of the best 3D printers has what you're looking for.
Movies & TV

The best shows on Netflix, from 'Haunting of Hill House’ to ‘Norsemen’

Looking for a new show to binge? Lucky for you, we've curated a list of the best shows on Netflix, whether you're a fan of outlandish anime, dramatic period pieces, or shows that leave you questioning what lies beyond.
Virtual Reality

Think virtual reality is just for games? These awesome apps will change your mind

Virtual reality isn't all about gaming. Swim with turtles, paint in 3D, and immerse yourself in some unique experiences the platform has to offer with our curated list of the best VR apps.

Latest ‘Fortnite’ update channels Halo with a scoped revolver

The latest update for Fortnite, update 7.20, is now available, and it brings a new Scoped Revolver weapon to the game alongside the returning Glider item and a limited-time Snipers-only mode.

‘Call of Duty: Black Ops 4’ will make Blackout mode free to play this week

Treyarch and Activision are offering Call of Duty: Black Ops 4's Blackout mode as a free trial download for a limited time. The mode will be available from January 17 through January 24.

Break out the Wii: ‘Just Dance’ movie reportedly in the works

Sony's Screen Gems has reportedly acquired the film rights to the Just Dance video game series from Ubisoft, which previously helped bring the game Assassin's Creed to the big screen in 2016.

‘Fortnite’ security flaw let hackers spy on players through microphones

A security vulnerability found in Fortnite allowed hackers to gain access to other players' accounts, potentially letting them spy on conversations using the in-game microphone. It has been addressed.

Microsoft CEO says Project xCloud is the ‘Netflix for games’

Microsoft CEO Satya Nadella referred to the company's Project xCloud game streaming service as "Netflix for games." The service will let users play Xbox and PC games on a variety of devices.

‘The Division 2’ private beta kicks off February 7 on consoles and PC

The private beta for Tom Clancy's The Division 2 starts on February 7 and runs until February 10, Ubisoft announced in a new story trailer. To guarantee access to the beta, you have to pre-order the game on PS4, Xbox One, or PC.

Immerse yourself in a new universe with these incredible PSVR games

The PSVR has surpassed expectations and along with it comes an incredible catalog of games. There's plenty of amazing experiences to be had so we've put together a list of the best PSVR games available today.

Here are all the awesome games you can play without a fancy graphics card

Just because you don't have a dedicated graphics card, it doesn't mean you can't enjoy some of the best games out there right now. This is our list of the best games you can play on Intel integrated graphics.

Console wars are so last-gen. Check out all the games that support crossplay

Crossplay is still in its infancy, but a growing number of games support online multiplayer between competing platforms. Here's a list of all games that support console crossplay.