shock horror secrets discovered on old copiers!

[banginbishop]

Yep its been reported in america, now we have breaking news in the UK - not!

Office photo-copiers containing sensitive information are being sold to potential fraudsters | News Of The World

The post by trevor nelson is spot on with his comment!

[msaeger]

I am betting a copier sales person sent in a tip for this whole deal. We have just gotten more sales because of this.

[ApeosMan]

Multifunction devices and printers are a goldmine of valuable information if you know what your doing, all brands have their security flaws IMHO. Sadly a lot of I.T. people are not aware of the vulnerabilities.

[fixthecopier]

With all the news about HDD's, everyone thinks they have one. One of my customers has signs posted all over their machines stating that they own the HDD, problem is , none of them have HDDs.

[Stirton.M]

With all the news about HDD's, everyone thinks they have one. One of my customers has signs posted all over their machines stating that they own the HDD, problem is , none of them have HDDs.

We had a customer who was trading up from an old EP3050 and was insistent that we wipe the hard disk before taking the machine. It took 20 minutes to convince her that her POS analog had no drive.

[jonhiker]

Here we go again!

We've been doing a lot of DOSS(Data Overwrite Security Software) installs and wiping hard drives because of this. Another way to make a few bucks.

[banginbishop]

personally i think its down to the lease company as they own the m/c or the company who had the m/c to implement it into the sales/hire contract that they retain the hdd. Lets face it most companies when they upgrade their IT equipment, they remove all Hdd from the equipment before its disposed of- the sooner companies realise this the better.

[Herrmann]

You dont even need to get physical access to the mashine, all it needs is a stupid it admin.
For the example of Ricoh, try this:

open Google com (if it redirects to your contry, enter www.google.com/ncr ;ncr stands for *no country redirect* ) , then enter in the search mask:
(inurl:webArch/mainFrame.cgi) | (intitle:"web image monitor"-htm -solutions)

have fun

Note: if there are documents in the Document Server, you can read the first side without problems.
Note2: even if the mashine has the standard setup and password, dont fiddle around with it, thats not nice

[zed255]

You dont even need to get physical access to the mashine, all it needs is a stupid it admin.
For the example of Ricoh, try this:

open Google com (if it redirects to your contry, enter www.google.com/ncr ;ncr stands for *no country redirect* ) , then enter in the search mask:
(inurl:webArch/mainFrame.cgi) | (intitle:"web image monitor"-htm -solutions)

have fun

Note: if there are documents in the Document Server, you can read the first side without problems.
Note2: even if the mashine has the standard setup and password, dont fiddle around with it, thats not nice

That's nuts! I was able to get a scan of a friggin' passport in under five minutes! Nay, it was actually three in one PDF! Crazy.

[Stirton.M]

holy crap with this kind of information an unscrupulous hacker now has access to any of those networks and purely wreak havoc outside of the needs of the copier.

I agree stupid IT admin.

To my knowledge, Konica Minolta machines do not have this capability. If Ricoh is aware of this and they're not informing their customers they are culpable in losses that these companies might face due to any hacking activity that could arise from this. I think I'll make this information available to our sales reps so then we have a leg up on the competition out there.