Slashdot Log In
Are Your Peripherals Monitoring You?
Posted by
timothy
on Sat Nov 13, 2004 08:08 AM
from the linux-never-gets-the-cool-software dept.
from the linux-never-gets-the-cool-software dept.
An anonymous reader writes " Engadget is reporting that
'Lexmark, makers of printers and scanners, has been caught monitoring users' printer, scanning, and ink cartridge usage.'" Newsgroup comp.periphs.printers readers noticed the software; the Engadget report says that "Lexmark say they're just tracking printer and cartridge usage, but the registration information and packets being sent say otherwise."
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Not clear? (Score:4, Interesting)
What am I missing? Couldn't somebody just install the program and sniff the information out of the packets?
Gesh, this is slashdot...
Re:Not clear? (Score:3, Insightful)
Re:Not clear? (Score:5, Insightful)
While virtually everyone on slashdot knows to install anti-virus, anti-spyware, firewall, firefox etc, it's all getting way out of control. Who the FUCK (except from a tin foil hat nerd) would expect a PRINTER DRIVER to spy on you? Isn't it great how this sort of crap is legal, but (for example) modding a console isn't?
Parent
Re:Not clear? (Score:5, Insightful)
2. Lexmark AFAIK is one of the companies who are participating in the stupid law assistance program where software and hardware should detect common types of currency and refuse to copy or print it. Going from there to ratting on the ones who scan/print it is only one step.
Parent
Re:Not clear? (Score:3, Funny)
That's really only going to work on a counterfeiter dumb enough to have an Internet connection on his currency scan'n'print LAN.
The people they're most likely to catch are the kids that watch National Treasure [imdb.com], and then start scanning $bills and loading the images into a pirated copy of PhotoShop to see if they can find the clues...
As every printer manufacturer... (Score:3, Interesting)
Personally I dislike inkjet printers since they usually are causing a mess by spreading the ink everywhere, and the printouts are normally not water-resistant either! Another thing is that the ink cartridges tends to dry up and cause messy pritouts if any if you leave the printer unused for some months. Only way out is t
Re:As every printer manufacturer... (Score:5, Insightful)
There are two much less intrusive ways to do this:
1) design the printer to use separate cartriges for each color, or
2) offer a used-cartridge trade-in discount and check how much ink is left of each color.
Parent
Re:Are yet just, plain, mad? (Score:5, Interesting)
Frankly, I think you may have it backward. Lexmark isn't the crack dealer: we are. They get the first hit (i.e., we give them fifty bucks for the printer) and then they keep getting periodic hits every time we run out of ink. The problem is, printer manufacturers have growned accustomed (nay, addicted) to this way of doing business: they like that unending revenue stream from little boxes filled with ink. It's the way of the modern world, i.e. don't just sell somebody something once, sell it to them over and over and over.
I'd like to know how many ink cartridges you have to buy before you've paid them back for the loss they took on the printer itself (assuming they take such a loss, China makes things pretty cheap nowadays) and when those sales start becoming pure gravy. Hell, if Lexmark wants to use those spyware drivers to help their customers they could do this: keep track of the number of times the cartridge has been replaced, and when the company has made back what it lost on the printer sale, send the user a discount card. The user could then take that card to any store that sells Lexmark cartridges and get some money off. Hell, if Lexmark wants to accumulate personal data in spyware fashion they should give something to their customers for the privilege, much like the major grocery store chains do.
Whatever, I really don't like Lexmark anyway and I'm proud to say I've never owned a Lexmark product. Talk about a company that is ethically challenged
Parent
Re:Not clear? (Score:5, Insightful)
Just why is this stupid? Counterfiting is illegal and undesirable. Please explain your opinion.
I'm neither the original poster, nor do I necessarily agree with him. But I think I can do a good job as advocate for the Devil.
The obstensible objection to the hardware and software currency detection would probably be that it does nothing to catch actual counterfeiters but does inconveniance legitimate users. Do you really think that people such as these [independent.co.uk] are going to be bothered by such little measures. In order to procure the equipment, inks and papers to forge modern currency (at least in Europe), you have to be a professional. The only remaining result of this technology is the inconveniance to legitimate users.
Now that said, there is a secondary reasoning behind objecting to the law which is less commonly stated, but often underlies such arguments.
You stated that Counterfeiting is illegal and undesirable. Placed in a criticism, this indicates that you feel the law is essentially a good thing and that legality is an indication that something is acceptable. There are many who would agree that counterfeiting is undesirable (it reduces the value of their own / family's money) but would not instinctively add illegal as a criticism. This is because many now feel the government is an adversary, especially in recent times and especially in the US and the UK. They are heavily concerned about increasingly unjust laws and this is colouring their view of the entire legal process. The relation of something as large as this to something as small as the anti-counterfeiting technology is twofold. Firstly, in foisting this technology on innocent people, they naturally resent the presumption of wrong-doing. Much the same as you would feel about having people come around to search your home for stolen goods without grounds for suspicion, or having someone wire your car so that it couldn't go over 70mph to prevent speeding, or outlawing firearms (in the US). It's insulting to many people who no longer feel the government is their friend. It's especially insulting that this redundant technology was diseminated secretly and sneakily amongst people who did not know that what they bought had that it had been fiddled with by government agencies. Remember, many people no longer regard the government as friendly.
The second secret reason behind the objection may be that in order for this technology to work there has to be some subversion of people's computer systems. It can't be implemented in The Gimp [gimp.org] and if Photoshop or Lexxmark is calling the FBI when it detects a banknote, then this is basically taking control away from the user. He can no longer trust his computer. Who knows what information it's providing to other parties. This will be especially true with technologies enabled by Trusted Computing. The issue about the anti-counterfeiting technology is not the thing in isolation, but that is part of a broader sweep of taking power away from the user and making their computers work for someone else, not their owner.
Okay, that's my analysis. Of course, the OP may not think this way at all, purely basing his comment on the fact that the technology is flawed (which it is) and inconveniances innocents (which it can do); but I think that many people do feel the way that I've described.
For myself, I just want someone to post the pattern so that I can mix it into my own images and mess with people's heads.
Parent
Re:Not clear? (Score:4, Interesting)
Another possibility is some printers, if they get more than a certain number of images with the pattern lock-up, requiring an expensive service call from a factory rep, who's policy is when they see that error code, will report it to the Secret Service. Immagine what it could do the the Secret Service's ability to investigate real crimes if I posted some pictures of Sara Michelle Geller nude with the pattern on a P2P network.
Parent
Re:Not clear? - profit of course ! (Score:4, Interesting)
Parent
Re:Not clear? (Score:5, Informative)
Yes, but nobody has yet. I read this [google.com] on the newsgroup last week; the two articles in the Slashdot "summary" obviously haven't investigated it beyond quoting these articles.
The news posting in full is:
Parent
God I hope not (Score:3, Funny)
Please clarify (Score:4, Insightful)
Lexmark, makers of printers and scanners, has been caught monitoring users' printer, scanning, and ink cartridge usage."
Then you try to tell us this:
"Lexmark say they're just tracking printer and cartridge usage, but the registration information and packets being sent say otherwise."
So the evil Lexmark tells you that they are tracking printer and cartridge usage, which is what you tell us is what you found. Then you claim that the packets being sent tell you something different. Well, spill it! What did you find that Lexmark didn't say they are tracking? It seems that they told you what you'd expect to find if you monitored their packets.
I don't like the idea that some company is building drivers that call home. But it's not because I think my privacy is somehow invaded. I just don't like someone using up my bandwidth without my knowledge.
If I was really concerned with privacy, I doubt I'd be using a computer, much less connecting it to the Internet.
Re:Please clarify (Score:4, Informative)
Which immediately suggests a course of action to "poison" the information pool - register as Darl McBride and start copying something illegal...
Parent
Re:Please clarify (Score:4, Insightful)
Spying is spying, no matter if it happens daily or monthly. And who are you to be sure they don't collect other info, send ascii-only copies of your printed documents, scan for keywords and worse. Calling home once a month is enough to report back every info you hold dear. Plain ASCII, zip compressed doesn't need more bandwidth.
But none of us has a problem with others monitoring what we say or do. I have nothing to hide. I like orange jump suits and cable ties. I like the president. I am a happy citizen and I will go back to work now.
Parent
Data stealing (Score:4, Interesting)
Re:Data stealing (Score:4, Insightful)
We (or at least me, though I seriously doubt I'm alone) generally have no problems with `spyware' if it's installation is *completely* voluntary and if the user is educated on what it is and does clearly (and not in some 500 page document) before it's installed. Especially if it's something that the person has to manually install the program, and especially if the program is benign and useful (counting linux users = benign, but not terribly useful for a given user.)
You may think this has something to do with Linux, but it really doesn't -- we generally don't have problems with Microsoft Update either, for example, even the automatic functions, and they phone home on a regular basis as well. This could change, however -- for example, if we were to learn that the program was reporting back more information than we were told it did.
Parent
ZoneAlarm (Score:5, Interesting)
Re:ZoneAlarm (Score:5, Interesting)
Parent
Re:ZoneAlarm (Score:5, Funny)
Parent
Re:ZoneAlarm (Score:4, Informative)
After installing the printer I noticed the process "LEXPPS.EXE" trying to broadcast and do everything to get onto the network first then the Internet second. I simply don't allow it access because at the time I had a wireless hookup (with no WEP key) and was afraid that someone might try printing to my printer.
Even with that process blocked I could still print "over the network" so it wasn't even an issue and nothing has "broke" since then...
By the way, the process listens on 1026.
Parent
Posible reason (Score:5, Insightful)
However, this does not justify them sending the data without your knowing/asking. If they wanted to keep a flag in the printer and when you return the printer for a repair under warranty, they cold check for this flag and refuse to honor the warranty.
And, why would they want to hide their intent and send the data to a wierd sounding URL (lkcc1.com)? I would have first suspected some other scumware trying to phone home, never suspecting lexmark. Well, guess you cannot trust any compan to have honor ro ethics these days.
Another Posible Reason (Score:5, Insightful)
Parent
Re:Another Posible Reason (Score:5, Interesting)
More likely they would instruct the driver to go into "crap quality" mode. Then they could point to the lousy print you get with 3rd party ink and say "See! Those other ink cartriges aren't as good as ours! Look how much better the print is when you use genuine Lexmark brand ink cartriges!"
At least, that's what I would do if I was a sleazy, money-grubbing corporation....
Parent
Newer print drivers only? (Score:5, Informative)
I don't see any c:\program_files\lexmark500 directory even though I have the print driver, downloaded from lexmark.com, installed.
I've added the following to my hosts file just in case.
0.0.0.0 www.lxkcc1.com
printing ripoff (Score:5, Insightful)
bullshit. i will never buy one of these printers again (this means you lexmark, canon, hp, and your friends). when will a manufacturer stand up and sell good quality printers, refillable by the user using just an ink bottle? there is a market of people who are willing not to buy the cheapest piece of shit printer because they know how that turns out. who will fill it?
Re:printing ripoff (Score:5, Informative)
Parent
Re:printing ripoff (Score:5, Funny)
Parent
Re:printing ripoff (Score:5, Informative)
The i970 is a 6 color printer, FWIW. Photo printing is quite nice.
Parent
Re:printing ripoff (Score:5, Funny)
Parent
Re:printing ripoff (Score:5, Informative)
Laser printers are expensive at a first glance, but the price per page is a fraction of a inkjet. It's overall a much better value.
Still, if you want a cheap one, try the newer Cannon inkjets. You'll still be forced to buy overpriced, half-filled ink tanks, but they work as expected, the printing heads don't clog and the print quality is top notch (for an inkjet). I have a Cannon S1000 at work that has been working perfectly for almost two years now. I wish i could say the same about Epson printers.
Parent
LaserJet 4 Plus is hard to beat. (Score:5, Interesting)
Parent
Usenet post (Score:5, Informative)
That's ok... (Score:5, Funny)
Just as long as my Dvd burner isn't monitoring what I am burning...
Didn't the users agree to this monitoring? (Score:4, Interesting)
Re:Didn't the users agree to this monitoring? (Score:3, Insightful)
If I buy a printer, it should print what I tell it too and fck all else. Adding a clause in a 30 page eula that says using this printer signs my kids over for experimentation isnt exactly playing fair.
fck lexmark.
Re:Didn't the users agree to this monitoring? (Score:5, Informative)
Legally binding? I don't think so. EULAs have questionable legal status at best (I'm sure some lawyer could argue for the fact that the fact that the EULA is not printed on the box and the fact that some say "If you do not agree, you cannot install this software" could very well amount to coercion or something. EULAs have never been tested in court.
I would love to see a EULA with some seemingly innocuous yet annoying clause such as "By agreeing to this license, you give everyone the right to call you 'butthead' for the rest of your life." and then have that tested in court. Ideally, there would be one of two outcomes: EULAs become illega or software vendors are legally obligated to accepted returned opened software if the user did not agree to the EULA. (Which means many software vendors would stop stocking software with crap EULAs, and maybe the software industry would get a wake-up call.
And the older crowd here will remember that EULAs didn't always used to suck. They used to be printed in fine print on envelopes containing the CD or floppies, and said in big letters "If you open this envelope, you agree to the license". Which is much better, because if you didn't agree to the license, you could take the software back and if the diskettes were unopened, the place would almost always accept returns.
Parent
Sites to block (Score:5, Informative)
www.lxkcc1.com
lxkcc1.com
w
lxkcc2.com
ips
192.146.101.0 - 192.146.101.255
Lexmark sees you need a new model.... (Score:3, Insightful)
I don't find this at all shocking. Lexmark makes those lovely OEM Dell printers that you sometimes can get free with a PC. Not only is the software a commercial to buy ink from Dell but the cartages are keyed so you have to mail order the ink. Now Lexmark can track you by serial number and possibly detect if you've been a naughty user and used 3rd party cartages or refilled you cartages. Can anyone say warranty void? Even better still, they can collect enough information on your printing habits and offer you bigger and better printers.
There are good reasons to object to this. What we need are some solid facts as to what exactly is reported to Lexmark, and how to prevent this. Would adding "www.lxkcc1.com 127.0.0.1" to the hosts file be effective?
Or just spoof data (Score:5, Funny)
They'd soon stop trying to spy on the users, if the data was all that everyone keep on printing the same url all the time, something with "goat" in the URL...
Parent
Whaddya bet.... (Score:3, Insightful)
Xerox network lasers (Score:5, Interesting)
I don't know what was in those mails - but a google search revealed an article about a large data mining system based on Oracle; I think the main intent was to detect reasons for early failure - but who knows what happened to the data.
Re:Xerox network lasers (Score:5, Interesting)
Also, they can be configured to send out e-mail to supply adminsitrators (in this case, picture Carol, the PHB's secretary in Dilbert) to ask for ordering new supplies with a handy web page served from the printer, if human intervention is desired. You're sure it was not something like this?
Parent
Well then... (Score:4, Funny)
Within seconds of blocking it in my firewall ... (Score:4, Informative)
Nov/13/2004 09:48:00 Drop TCP Packet From LAN 192.168.0.2:1654 192.146.101.142:80 Rule: Lexmark Block
Nov/13/2004 09:47:56 Drop TCP Packet From LAN 192.168.0.2:1654 192.146.101.142:80 Rule: Lexmark Block
Nov/13/2004 09:47:41 Drop TCP Packet From LAN 192.168.0.2:1502 192.146.101.142:80 Rule: Lexmark Block
Nov/13/2004 09:47:34 Drop TCP Packet From LAN 192.168.0.2:1502 192.146.101.142:80 Rule: Lexmark Block
Nov/13/2004 09:47:30 Drop TCP Packet From LAN 192.168.0.2:1502 192.146.101.142:80 Rule: Lexmark Block
and I wonder just how often its trying to phone home.
Does no one else check for drivers *first*? (Score:4, Informative)
It really amazes me when I go to help someone with their PC, and I see a list of startups dozens of entries long. When I see a system tray that stretches halfway across the screen. When their process list requires scrolling down for three pages to see them all.
For a good default policy, when you buy new hardware, throw away any software it came with. You don't need it.
Printers? They all speak PCL or PS (unless you very unwisely bought one that does not, which goes back to "check for driver support first"). End of story.
Scanners? Okay, once upon a time, these could take some work to get up and running. But anything less than five years old (and if older, you can get a better quality replacement literally for around $20)? Free hint - Plug it in, open MS Paint, and check out the "from scanner or camera" menu. Simply amazing, eh? Everything you need to scan, already built in.
Cameras? I had two of my users actually install the software for new cameras we got just this past week. Do you have any idea what a pain it took to remove that software, when they discovered that not only did they not need it, but they couldn't use it due to some vague, irregularly-reproduceable conflict with other software they actually do require? Anyway, point of story - After removing every last trace of Kodak's crappy software (including a very large application, a boot-time driver, and a service! Ack!), I demonstrated to my users that they just need to connect the USB cable and turn the camera on. Poof, all their pictures appear under "My Computer" as a removeable drive named similarly to their camera's model.
How about video cards? Okay, no argument that you would do well to run the newest actual video driver from the manufacturer, but do you have any idea how many people I've see that also have 3Dfx's task manager, NVcpl and Nwiz, or ATi's set of up to half a dozen useless crapware blobs, all loading at startup (I won't even go into startups such as MS Messenger, Office startup, Quicktime, and all the rest that suck memory at the whopping "savings" of 5 seconds the first time you run the relevant program)? Sad. Truly sad, that people let such software steal their memory and CPU cycles.
Okay, I'll grant that more exotic hardware may well require third party support. But that quite simply does not apply to 99% of machines out there.
So I suppose the moral of all this, to stay on-topic... Why do people install Lexmark's own drivers in the first place? Don't ! Use the built-in drivers, and you can get all the same functionality without the spyware or the bloatware.
Not to imply that Microsoft doesn't pull similar crap as Lexmark (time.windows.com, anyone? Which if you run your own NTP server, you will notice does not speak plain ol' NTP). But just because one company likes riding us bareback doesn't mean we need to spread for the rest.
Re:Lexmark sucks (Score:5, Funny)
You are an engineer for [evil printer company] and are told to increase profits 50%. So you increase i=20 in the cartrige purge program.
Parent
Re:In Soviet Russia... (Score:3, Funny)
In Soviet Russia, you monitor your peripherals!
Re:really! (Score:5, Interesting)
10 sell printer
20 sell inkcartage
30 disable inkcartage via internet
40 goto 20
Parent