bugtraq - RE: HP printers and currency anti-copying measures

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <96B5E0E83D6A07428B6CDB8775AB9FBA1D5B0B@domain01.nanonaples.com>
Date: Sat, 17 Jan 2004 13:39:10 -0500
From: "Kevin E. Casey" <kcasey@...oweb.com>
To: "BUGTRAQ@...URITYFOCUS. COM" <BUGTRAQ@...URITYFOCUS.COM>
Subject: RE: HP printers and currency anti-copying measures

Any decent counterfeiter would be aware of the rulesforuse.org website
and could easily make a tweak to their host files... Say point
rulesforuse.org to their own webserver which would then be designed to
return data permitting the copying of currency images... 

As for preventing image copying, it seems a half-witted attempt by
bureaucrats to stop kiddyfitters... It probably wouldn't take too much
to defeat it anyway (like cut the bill into thirds, then scan each third
seperately and stitch it back to together).  

-----Original Message-----
From: Richard M. Smith [mailto:rms@...puterbytesman.com] 
Sent: Saturday, January 17, 2004 12:10 PM
To: BUGTRAQ@...URITYFOCUS. COM
Subject: HP printers and currency anti-copying measures

Hi,

Last week, the Associated Press reported that Adobe has incorporated
anti-copying technology in their Photoshop CS software which prevents
users from opening image files of U.S. and European currency.  Here's
the article:

   Adobe admits to currency blocker
   http://tinyurl.com/2xnno

(http://www.sanmateocountytimes.com/Stories/0,1413,87~11271~1882929,00.h
tml)

I did some investigating on my own computer and discovered that HP has
also been shipping currency anti-copying software in their printer
drives since at least the summer of 2002.  I have an HP 130 photo
printer and found the string "http://www.rulesforuse.org" embedded in
the driver.  

According to a few newsgroup messages posted in 2002 and 2003, folks are
seeing this URL printed out when they attempt to print images of certain
types of bills.  An HP printer with this anti-copying technology only
prints out an inch of a currency image before aborting the print job.

Here is a list of HP printers which appear to have this anti-copy
technology embedded in their Windows printer drivers:

   HP 130
   HP 230
   HP 7150
   HP 7345
   HP 7350
   HP 7550

I suspect the list of affected HP printers is much longer.

I located these printer drivers simply by searching all files in my
Windows and Program Files directories for the string "rulesforuse".  If
other folks run this same experiment, please let me know of other
programs which appear to contain currency anti-copy technology.

There are some unanswered questions raised by this quiet effort by U.S.
and European governments to turn home computers into anti-counterfeiting
"cops":

   1.  Besides graphic programs and printer drivers, what
       other kinds of software is this currency anti-copy
       technology being embedded in?

   2.  Are companies being required to include currency
       anti-copying technology in their products?  If not, 
       what incentives are being offered to companies to 
       include the technology on a voluntary basis?

   3.  Will future versions of this technology, "phone home"
       to the rulesforuse.org Web site with details about
       a violation of the currency copying rules?  It would
       be very easy to include an email address, name of the
       image file, software version number, etc. embedded in
       a URL to the rulesforuse.org when a violation has been
       detected.

Richard M. Smith
http://www.ComputerBytesMan.com