Am I the only one with brains here at the office?
Moderator: Moderators
- zaxrex
- DCAWD Founding Member
- Posts: 6350
- Joined: Mon Sep 06, 2004 8:00 pm
- Location: asiandale
Am I the only one with brains here at the office?
So we get an e-mail yesterday that our old printers were being replaced with new printers.
Old printers were leased to be swapped out with new printers that are leased, so we get good performance upgrades, yay!
I come back from lunch and see the movers carting out the shrinkwraped old machines and their print servers.
Heeeeyy, wait a minute.
"What is up with the print servers?" I asked.
"Oh, those machines were leased along with the printers, so they are going back." the tech said.
"You have an FOUO data destruction certificate for those?"
"Huh?"
At this point I walk over to the FSO desk and ask him if he has wiped the print servers before they are carted away.
"No, those machines never printed classified material" he says.
WTF? These machines were going to walk out of here with six years of industry proposals, DOE/DOJ/DHS/DOD reports, and FOUO capabilities analysis and nobody is going to bat an eye?
I had fun snapping the ram chips and putting neodymium cylinders through the holes I drilled in the HDDS.
Not the best solution, but All I could do without getting access to the electromagnet in the SCIF.
Old printers were leased to be swapped out with new printers that are leased, so we get good performance upgrades, yay!
I come back from lunch and see the movers carting out the shrinkwraped old machines and their print servers.
Heeeeyy, wait a minute.
"What is up with the print servers?" I asked.
"Oh, those machines were leased along with the printers, so they are going back." the tech said.
"You have an FOUO data destruction certificate for those?"
"Huh?"
At this point I walk over to the FSO desk and ask him if he has wiped the print servers before they are carted away.
"No, those machines never printed classified material" he says.
WTF? These machines were going to walk out of here with six years of industry proposals, DOE/DOJ/DHS/DOD reports, and FOUO capabilities analysis and nobody is going to bat an eye?
I had fun snapping the ram chips and putting neodymium cylinders through the holes I drilled in the HDDS.
Not the best solution, but All I could do without getting access to the electromagnet in the SCIF.
Patience is the ability to idle your motor when you feel like stripping your gears
- PGT
- DCAWD Groupie
- Posts: 1578
- Joined: Mon Jun 04, 2007 11:06 am
- Location: Loudoun
Re: Am I the only one with brains here at the office?
we had this discussion a few months back......the fact that printers have storage aboard and that was something that had to be processed too. a shame someone didn't think this through....
2013 BMW 328i M Sport with 8sp in Estoril Blue II
2012 Chrysler 300C SRT8 - Always bet on black
2012 Jeep Wrangler Unlimited Rubicon Call of Duty: Modern Warfare 3 Edition, otherwise known as the MW3 (and badass)
2012 Chrysler 300C SRT8 - Always bet on black
2012 Jeep Wrangler Unlimited Rubicon Call of Duty: Modern Warfare 3 Edition, otherwise known as the MW3 (and badass)
- drwrx
- DCAWD Founding Member
- Posts: 4382
- Joined: Mon Sep 20, 2004 8:00 pm
Re: Am I the only one with brains here at the office?
Working in the print world I am just going to let all this slide.
I cannot begin to tell you some of the scary, SCARY, stuff I have seen regarding printer and print server security lapses over the years. Usually, it has to do with security policies that are clearly out of date. Most are Byzantine and draconian but have not been updated to deal with the realities of the digital age. Folks trying to figure out how to "shred and burn all materials" when there are no prints, plates or negatives. We recently had two print servers upgraded with not one discussion about what the proper process was to wipe the servers so that no data could be accessed. The sad part is that no one in our department who can set or change policy has any design or print background so it never even crosses their minds.
I cannot begin to tell you some of the scary, SCARY, stuff I have seen regarding printer and print server security lapses over the years. Usually, it has to do with security policies that are clearly out of date. Most are Byzantine and draconian but have not been updated to deal with the realities of the digital age. Folks trying to figure out how to "shred and burn all materials" when there are no prints, plates or negatives. We recently had two print servers upgraded with not one discussion about what the proper process was to wipe the servers so that no data could be accessed. The sad part is that no one in our department who can set or change policy has any design or print background so it never even crosses their minds.
- complacent
- DCAWD Founding Member
- Posts: 11651
- Joined: Sun Aug 29, 2004 8:00 pm
- Location: near the rockies. very.
- Contact:
Re: Am I the only one with brains here at the office?
networked printers and their bigger brothers (multi-function devices) scare the crap out of me, period.
there are soooo many services running on these things now (almost a full distro!), gigantic hard drives, wired and wireless nic's, etc. the attack surface is gigantic.
never mind how poorly they're detected by most scanning software...
hate them, hate them, hate them.

there are soooo many services running on these things now (almost a full distro!), gigantic hard drives, wired and wireless nic's, etc. the attack surface is gigantic.
never mind how poorly they're detected by most scanning software...
hate them, hate them, hate them.

colin
a tank, a yammie, a spaceship
i <3 teh 00ntz
a tank, a yammie, a spaceship
i <3 teh 00ntz
-
- Moderator
- Posts: 6314
- Joined: Wed Oct 19, 2005 1:15 am
- Location: Alexandria
Re: Am I the only one with brains here at the office?
we have one of those hdd degausser panels. one of the "throw drive on slate, fire up, be somewhere else" deals.zaxrex wrote: I had fun snapping the ram chips and putting neodymium cylinders through the holes I drilled in the HDDS.
Not the best solution, but All I could do without getting access to the electromagnet in the SCIF.
i wish i had a drill though

-Ben


- complacent
- DCAWD Founding Member
- Posts: 11651
- Joined: Sun Aug 29, 2004 8:00 pm
- Location: near the rockies. very.
- Contact:
Re: Am I the only one with brains here at the office?
i have a slightly illogical fear of those things. i always catch myself crossing my legs and defending the fellas when we fire it up.chicken n waffles wrote: we have one of those hdd degausser panels. one of the "throw drive on slate, fire up, be somewhere else" deals.
silly, i know. but still...

colin
a tank, a yammie, a spaceship
i <3 teh 00ntz
a tank, a yammie, a spaceship
i <3 teh 00ntz
-
- Moderator
- Posts: 6314
- Joined: Wed Oct 19, 2005 1:15 am
- Location: Alexandria
Re: Am I the only one with brains here at the office?
that's a legit concern... based on the philadelphia-experiment-esque sounds that resonate from those sumbitchescomplacent wrote:i have a slightly illogical fear of those things. i always catch myself crossing my legs and defending the fellas when we fire it up.chicken n waffles wrote: we have one of those hdd degausser panels. one of the "throw drive on slate, fire up, be somewhere else" deals.
silly, i know. but still...

-Ben


- Raven
- Mr. Underpowered or something
- Posts: 1221
- Joined: Thu Feb 18, 2010 12:46 pm
- Location: Manasty
Re: Am I the only one with brains here at the office?
Maaaan, you guys have much cooler toys than I do.complacent wrote:i have a slightly illogical fear of those things. i always catch myself crossing my legs and defending the fellas when we fire it up.chicken n waffles wrote: we have one of those hdd degausser panels. one of the "throw drive on slate, fire up, be somewhere else" deals.
silly, i know. but still...

All my cars have drum brakes and are sub 200 hp, what am I doing with my life?
2013 Mazda 2
1994 Chevy S10 pickup
1985 Chevy Caprice (no fuel system)
2013 Mazda 2
1994 Chevy S10 pickup
1985 Chevy Caprice (no fuel system)
- Mr Kleen
- DCAWD Founding Member
- Posts: 15034
- Joined: Mon Apr 18, 2005 6:46 pm
- Location: Wiesbaden.DE
Re: Am I the only one with brains here at the office?
it's even better when your office buys two different types of multi-function printer/scanners from two different vendors.complacent wrote:networked printers and their bigger brothers (multi-function devices) scare the crap out of me, period.
there are soooo many services running on these things now (almost a full distro!), gigantic hard drives, wired and wireless nic's, etc. the attack surface is gigantic.
never mind how poorly they're detected by most scanning software...
hate them, hate them, hate them.

- Sabre
- DCAWD Founding Member
- Posts: 21432
- Joined: Wed Aug 11, 2004 8:00 pm
- Location: Springfield, VA
- Contact:
Re: Am I the only one with brains here at the office?
They should definitely scare the hell out of you all.
Zak: (800) 424-9098 (DoD hotline)
You did the right thing by destroying them as much as possible. Depending on the level of information on things, you can even get them sent to the chipper/melter for no cost...
Zak: (800) 424-9098 (DoD hotline)
You did the right thing by destroying them as much as possible. Depending on the level of information on things, you can even get them sent to the chipper/melter for no cost...
Sabre (Julian)

92.5% Stock 04 STI
Good choice putting $4,000 rims on your 1990 Honda Civic. That's like Betty White going out and getting her tits done.

92.5% Stock 04 STI
Good choice putting $4,000 rims on your 1990 Honda Civic. That's like Betty White going out and getting her tits done.
-
- DCAWD Groupie
- Posts: 1659
- Joined: Fri Nov 19, 2004 7:00 pm
- Location: washington, dc
- Contact:
Re: Am I the only one with brains here at the office?
not to mention that they are often found on an ordinary user network and also plugged into a POTS line!complacent wrote:networked printers and their bigger brothers (multi-function devices) scare the crap out of me, period.
there are soooo many services running on these things now (almost a full distro!), gigantic hard drives, wired and wireless nic's, etc. the attack surface is gigantic.
never mind how poorly they're detected by most scanning software...
hate them, hate them, hate them.
2004 impreza outback
1964 beetle
1964 beetle
- RFBurn
- I'm a n000b
- Posts: 32
- Joined: Wed Dec 08, 2010 7:59 pm
- Location: Falls Church VA
Re: Am I the only one with brains here at the office?
there is the fear of radiation, however once you get to the point of having to destroy by hand 300 drives.. it seems like less of a big deal..complacent wrote:i have a slightly illogical fear of those things. i always catch myself crossing my legs and defending the fellas when we fire it up.chicken n waffles wrote: we have one of those hdd degausser panels. one of the "throw drive on slate, fire up, be somewhere else" deals.
silly, i know. but still...
Stu English
2011 WRX Hatch stock
2011 WRX Hatch stock