Slashdot Log In
Color Laser Printers Tracking Everything You Print
Posted by
timothy
on Mon Nov 22, 2004 06:26 PM
from the welcome-to-the-present-day dept.
from the welcome-to-the-present-day dept.
It's not new, but it's getting noticed: Jordan writes "Yahoo! News is reporting that several printer manufacturers are now and have been for some time embedding (nearly) invisible serial numbers in every document you print with their color laser printers, allowing law enforcement to track any such document back to the printer which printed it. The technology, ostensibly created to track down money counterfeiters, was created by Xerox about 20 years ago. A Xerox researcher says that the number-embedding chip lies 'way in the machine, right near the laser' and that 'standard mischief won't get you around it.'"
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Countermeasures? (Score:5, Interesting)
Re:Countermeasures? (Score:5, Funny)
Parent
Re:Countermeasures? (Score:5, Insightful)
Two more words: Pay cash
Parent
Re:Countermeasures? (Score:5, Funny)
"Hello Kinko's Employee. I'd like you to print 500 copies of this here One-hundred dollar bill. You can just keep one of them to cover the cost."
Parent
Re:Countermeasures? (Score:5, Interesting)
BTW it better be REAL cash, cause people at kinkos (the average employee) has already played around with copying money, and knows what thier copiers can and cannot do and most likely will spot the fake... as I am sure you know, the copiers at kinkos arent in the best maintenance condition and the colors arent calibrated that well.
Parent
Re:Countermeasures? (Score:5, Interesting)
Parent
Was I seeing these yellow dots, or others? (Score:5, Interesting)
Up till now I've always assumed the dots I saw (usually in empty areas, and always in a regular, widely-spaced square grid pattern) were the scanner picking up the paper tone as a very light yellow and trying to dither to match. But was I actually seeing these anti-counterfeiting dots? And if so, was I committing a felony by removing them? :)
I never noticed our Tektronix color lasers (780/7700) putting them on its output, nor the Xerox DocuColor four-color xerographic copiers (DC12/DC2045/DC6060), although the only ones I really gave the eagle-eye inspection to a lot were the DC output since the Teks were in the customer area and we usually only heard about those when they were out of toner or paper. You could see them on the customer originals if you really looked and turned the paper so the light shone off the toner, but you wouldn't notice them if you weren't looking for them.
And if any of you out there in Kinko-land have a grid chart in your store that gives you enlargement and reduction proportions so you don't have to play with the damned wheel, yeah, I made up that chart.
Parent
bad idea (Score:5, Insightful)
You can bet there's tricks they don't advertise on the discovery channel, particularly the intelligence agencies.
You can't be paranoid enough.
Parent
Re:Countermeasures? (Score:5, Insightful)
Parent
Re:Countermeasures? (Score:5, Insightful)
Parent
Re:Countermeasures? (Score:5, Interesting)
Parent
Re:Countermeasures? (Score:5, Insightful)
Print the document - then go get multiple copies done at Kinkos, or some other copy centre.
This serves two purposes - firstly you will have two sets of dots overlaid on each other - presumably this will 'confuse' anything trying to read the dots. Secondly, the dominate signature will be the public access device - if the dots are hard to see by the naked eye, they will be very difficult to copy.
For the tracking to work they need to match a serial number to a user - i.e. the device has to be registered. For small consumer devices (e.g. the HP CLJ 2500) it is simple for the user to simply not register the purchase with the manufacturer, however these sort of devices are unlikely to be capable of producing anything which could be remotely be considered a good forgery.
Large colour devices often come with maintenance contracts attached, so if you knew the serial number and had a cooperative manufacturer, tracking the owner would probably be relatively simple, however you would also find that these devices are typically in a shared user environment (offices, copy centres, student resource centres, etc...).
Having said that, I work for Xerox and conduct audits for large corporate clients regarding what equipment they have and how it's used - even with access to the sales records, client asset registers and physical identifcation of units we frequently have problems identifying every device on a site back to original point of sale. Errors in how SN's have been entered into billing systems or asset registers is not uncommon, chassis or logic boards get changed during maintenance changing the actual or apparent SNs (very common with HP or Lexmark equipment). This would only work with seriously large hardware with fully tracked service histories.
Parent
Re:Countermeasures? (Score:5, Insightful)
Many of the people who spoke out and signed the original Declaration of Independence were wealthy, and lost everything after they signed! Freedom of speech doesn't always come with no price tag. Sometimes people pay dearly for expressing their opinions, even in the "Land of the Free".
I am a Conservative Christian Libertarian (I know it sounds messed up). The sad thing is that there are many in our nation that have no problems with _more_ government control. These "conservatives" offer excuses like if you have nothing to hide, then why would you care? _I_ personally care because A) I have nothing to hide and B) if I did have something to hide it is none of your @##$@# business! Our government was never set up to be "big brother". Sadly we are almost there. Many of my fellow Christians are more then willing to give up their rights/liberties because they _think_ it will make them more "safe". They think that only "bad" people would want privacy and not want "big brother" to know your every move.
I am sorry but I will not give up my rights, liberty or privacy to make it easier for the government to catch a "bad" guy. As a "good" citizen, I am willing to help the government, police (I give them money every year), etc to stop crime, but my help stops when they try to encroach my rights. Yes, being able to print on a stinking piece of paper without the government tracking me is what I consider a right.
Parent
Re:Countermeasures? (Score:5, Informative)
Please refer to:
TALLEY v. CALIFORNIA, 362 U.S. 60 (1960) [findlaw.com]
McIntyre v. Ohio Elections Comm'n (93-986), 514 U.S. 334 (1995) [cornell.edu]
Very relevant is the quote from McIntyre:
While one can reasonably question anonymity as a "universal" right applicable in all times under all conditions, these times should be the exception rather than the rule with the burden falling on those who say that the restriction should apply rather than on those who say not.
Parent
Re:Countermeasures? (Score:5, Interesting)
Thinking about it, adding in a speckled yellow pattern as part of your printing algorithm would work - it would just take a little knowledge of what they print.
Does anyone know if the pattern gets printed even on white space? Printing a "blank" page should reveal the pattern and allow a suitable overlay that would stuff up the recognition algorithms.
Michael
Parent
You will never know. (Score:5, Interesting)
That knowledge would take lots of study to learn and you could never be sure. Printers with enough sophistication to detect currency and refuse to print can pull lots of tricks on you if it detects pattern prints and other investigations. A blank page needs no identification marks at all and the printer may refuse to print any. Subtle variation in letter spacing or shape can have the same effect. Do you know exactly where each pixel in each character you print are supposed to go? Missing pixels can encode a serial number as well as those that are not supposed to be there.
Parent
Re:Countermeasures? (Score:5, Insightful)
Assuming 8 digits of hexadecimal, that would give you 32 bits. So a little box 6 x 6 pixels would be enough. A laser printer has resolutions ranging from 600 to 2400 dpi. So you would need far less than one square millimetre to store such information. Even if you double the size of the box in order to have some sort of redundancy, that would still be far less than 1 square millimetre.
Parent
Re:Countermeasures? (Score:5, Funny)
*= if you don't Own an ion cannon yet, you can build one care of these DIY directions [slashdot.org] (a cyclotron is the key component to an ion cannon...)
Parent
Re:Countermeasures? (Score:5, Interesting)
This technology has been around a lot more than 20 years.
In Soviet Romania [google.com], a sample page from every typewriter had to be registered with the police, so that any samizdat produced could be quickly traced back to the typewriter's owner. Use your imagination as to what happened to the owner, or Google for it.
In Soviet Russia [geocities.com], all photocopiers were registered with the KGB and kept in secure rooms, to which physical access was restricted.
The West is probably still playing catch-up.
Parent
Re:Countermeasures? (Score:5, Insightful)
Comparisons of laser printers' chips with Soviet Russia are, however, exaggerating. There are probably lots of possibilities to distinguish two copies printed by two laser machines. While giving the state the possibility not just to compare the output of two known laser printers (which I'm sure comes very handy when tracking false money, extortions or some con-man tricks) but to find the printer which printed any possible text is surely disturbing, there is no comparison with Soviet-style secret police. Soviets didn't have to bother with chips, they had people spying on other people, on their neighbours and spouses --- it always works better than technology. The best defence before Soviet-style supervision is assuring your country isn't run by such kind of people.
Parent
Re:Countermeasures? (Score:5, Insightful)
Good enough? I doubt it. This is one time where security through obscurity worked. Considering there is not a live market and a real desire to remove these codes, it has not passed the test of many hands. A bunch of hackers can work collectively to get around an Xbox and a Playstation because there is the incentive of more functionality and thrill of experimentation that you can share with others. Printing money is not something there is a big following for and not something you advertise that you are interested in. I would assume many big time money printers people have got around this serial number issue but it can still be used to catch the other 99% that thgouht they knew what they were doing.
Parent
I was right! (Score:5, Funny)
Re:I was right! (Score:5, Insightful)
Parent
Re:I was right! (Score:5, Insightful)
Parent
Re:I was right! (Score:5, Insightful)
Well, they can still ask the daisey wheel vendor, but they will get an "I don't know" answer.
Parent
Re:I was right! (Score:5, Funny)
Parent
Re: Gold-backed currency (Score:5, Interesting)
Um, I hate to tell you this, but while the US$ may not be "real" in the sense that it directly represents an actual commodity, there is no less trust involved in a gold-backed currency. First of all, how do you actually verify that the apparently gold-backed dollars in your wallet are actually backed by gold? You'd have to turn them in and trust that you'd actually get some amount of gold in exchange. And how do you know that the gold you own is actually worth something? While gold is actually useful, it certainly doesn't have enough intrinsic value to justify its market price. It's value is primarily derived from the speculation of others like you who trust that it will have some enduring value and is therefor a safe investment.
An interesting story: a friend and co-worker of mine is from Bosnia, and lived with his family in Sarajevo during the war. His mother had saved her gold and jewels believing that they would help them during (or after) the siege. Before the end, however, she ended up trading most of them (they'd be worth a couple thousand dollars, now) for a dozen eggs. It just goes to show the extent to which the relative value of anything can change based on the current situation.
Parent
Just another reason... (Score:5, Interesting)
I mean, seriously. How else would they know who bought it and how to get a name from that serial number? I guess maybe if the store kept your credit card info on file or something and associated it with the serial number, but how often would that happen?
Lesson learned, if you want to print hundreds of forged checks or counterfeit bills, pay for the printer in cash!
Re:Just another reason... (Score:5, Funny)
Lesson learned, if you want to print hundreds of forged checks or counterfeit bills, pay for the printer in cash!
But not cash that you printed yourself on a printer that wasn't paid for with cash you didn't print yourself. Or something.
Parent
Re:Just another reason... (Score:5, Insightful)
I mean, seriously. How else would they know who bought it and how to get a name from that serial number? I guess maybe if the store kept your credit card info on file or something and associated it with the serial number, but how often would that happen?
Lesson learned, if you want to print hundreds of forged checks or counterfeit bills, pay for the printer in cash!
Actually, if you're going to do anything illegal, cash is king. Just print some up and, well,
Anyway, police officer friend of mine once who said that if you're going to do something illegal, do it big, do it once and don't tell anybody.
That "once" part of it is key, you could print up a bunch of cash one afternoon, enough to pay for the next printer (with cash, of course), then dispose of the printer.
Greed will get you in the end.
Alan.
Parent
Re:Just another reason... (Score:5, Funny)
Now I just have to buy a printer at a yard sale and commit some heinous crime with it.
Later on...
"Yep, looks like he was murdered with this printer, but don't worry we will track it right back to the owner."
Parent
Although... (Score:4, Insightful)
Although I hear not buying a Xerox printer will.
Engadget (Score:4, Informative)
CSI (Score:5, Funny)
Re:CSI (Score:5, Funny)
Wait a minute...I think the last box of tin foil I bought was from WalMart! That means it probably has an RFID tag...
IS NOTHING SACRED?!
=Charles
Parent
In the old Soviet Union (Score:5, Interesting)
It seems they were ahead of the US by 30+ years. Another sign of a dying empire.
Re:In the old Soviet Union (Score:5, Insightful)
The USSR was doing this 30+ years ago. They collapsed 13 years ago (1991). Total span of 17+ years.
The U.S started doing this 20 years ago. We only found out now. So, by the USSR model, it should be collapsing anytime now. Now take a look around and ask yourself, "Is this the America I grew up reading about?"
Parent
odd (Score:5, Funny)
It was 1984 twenty years ago.
We can turn this to our advantage... (Score:5, Funny)
The Geek revolution has begun.
They never learn. . . (Score:5, Interesting)
So use substandard mischief. :p
I'm quite serious really. Unless the serial number is tiled, just print a full border and keep whatever stuff you want to cut out away from the serial.
If it is tiled, you have a number of options. You could script a program to 'split' the image so that you print unmarked bands in multiple runthroughs which eventually add up to a full image. You could offset some unknown amount and then surround the serial number with other sequences to disguise the actual serial (would take some knowledge of how serials are assigned to do a good diguise). Both of those would require a little hardware modification. But if you're printing $100 bills. . . .
Anyway, those are just some ideas off the top of my head. The point is that if people know what they're up against, they can find a workaround. Ideally, these kinds of tricks would be kept secret. In the case, the point is trip up ignorant cons who don't account for something they don't realize exists.
Oh well. This will still nail the 16 year old delingquents who decide to pull a fast one on the clerk at their local grocery store.
Back to the old methods (Score:5, Funny)
Old News (Score:5, Insightful)
This is old news.
There have been news stories about serial numbers being embedded in printing for years. The first I read of it, at least 7 or 8 years ago was the same yellow microprint from color inkjet printers, which was mandated by the U.S. Gov't, to prevent counterfit bills from being printed.
All I've ever done myself is scan in bills at the highest resolution, to show people the microprint (note the double lines around the portrait, one is really text).
It actually doesn't stop anything, people still print them. I remember back in high school there was a story in the local paper about some kids getting dragged away by the Secret Service for photocopying $1 bills and putting them in soda machines. They only had to do one side, and it didn't care about the color, so easy drinks. Our school had a better 'hack'. If you took a water pistol and sprayed water into the bill slot, it'd short out the electronics of it, and you could push buttons all day to get free drinks. I saw it done a few times.
But hey, just assume that anything you print is being tracked. Chances are pretty good that nothing you print is going to be all that interesting.
Extremely paranoid? Pay cash for your printer, and get someone else to actually purchase it. Or don't leave home, because 'they' may be watching. Ha!
I hate to break your party (Score:5, Insightful)
Funny (Score:5, Insightful)
1) I never register a printer with the manufacturer after I purchase it. I also don't know anybody else who did either. It's a waste of time and an invasion of privacy.
2) Let's say a printer was never registered - and it was paid for with cash at a store like Best Buy. Good luck tracking down the buyer.
3) Even if both the above were not true and the manfucturer knew who originally bought it, one word foils their plans: Ebay. If you buy a printer on ebay, who knows how many hands it's been through before yours. While it is still possible to track it after a sale on ebay, it just got a whole hell of a lot harder.
PROM??? (Score:5, Interesting)
What are the chances that this is in PROM that is burned internally once the serial number is assigned? If so, overwrite it with a new code, perhaps through an undocumented command to the printer controller. After all, you don't think each of these chips is uniquely made, or that they don't have to do something like this to keep them all properly matched to the corresponding external serial numbers.
Or is it RAM, loaded by the firmware on each power-up? Then change your internal printer serial number. Those things are set during manufacture somehow.
Or look up Xerox's patent on the process.
Or swap your yellow, cyan, and magenta toners around, and make the corrections in Photoshop to get the desired image with the transposed colors. They'll be looking for the wrong color dots.
Or add lots of dots of your own.
Ever notice that this isn't the only anti-counterfeiting technology that likes to use yellow. Why is that?
There is a question remaining... (Score:5, Insightful)
I have seen several arguments here that this is a perfectly harmless technology, and some of those arguments have been logical and valid. However, it still begs one question: If it is such a useful, valuable technology, why are the manufacturers not informing the customers of this "feature" in their instruction manuals or on their packaging? I checked the websites of Canon, HP, and Xerox, including the specifications of several laser printers. In none of the feature or specification listings is it said "Prints unique serial number to easily identify printer of every document!"
If this technology is so useful, wonderful, and defensible, please feel free to inform those who pay money for your products. They might have a different view to give you. There are legitimate reasons to remain anonymous. (Even if that's just that you want to.) A desire for anonymity doesn't mean that you're doing something illegal, and that mindset is extremely dangerous, getting into the "Well if you don't want cameras in your living room, what do you have to hide?" territory.
Discovering the Number (Score:5, Interesting)
Yes, I'm sure that it is feasible with today's technology, but the expense of doing this on all color printers in the low profit margin color printer market makes me dubious. It will take a law to get all the suppliers to comply and create an "even-playing field" of expense for everyone. The patriotism Xerox demostrates may be commendable that their products are more trackable but it isn't profitable.
Looking at the problems with the coordination of the ISBN book publishing numbers or the social security numbers makes coordiantion of a secret serial number system that's shared between international suppliers even more absurd. "Oops, we accidentally re-used the secret id numbers for the Xerox printers with these knock-off Zerox printers for Tiger Direct."
Finding the serial number is a good first step. Refill an empty toner cartridge with black toner. This will not tell you the serial number (you'll have to do comparisons between printers of the same model to get that), but the presence of the serial number should be easier to find. If it's not there with the black toner then it's either a more subtle technology (modulating the laser itself?) or it's not going to be found.
The great thing about color laser is its comparative cheapness. Dye Sublimation printers were what the check people would use for very impressive mock-ups, but the dye refills were very, very expensive compared to the laser printer refills. Still, when someone in the art department wanted to make a fake United Federation of Planets Passport, they'd go for the dye sub printer when the boss wasn't looking.
Print the same blank sheet thru lost of printers? (Score:5, Interesting)
Re:Those rat b--- (Score:5, Funny)
What makes you think we still have such archaic things as privacy laws anymore? Dont you know that if you have a private life the terrorists win?
Parent
Re:Those rat b--- (Score:5, Funny)
Did you know that every time you touch something, you leave an invisible mark that's unique to you and can be used to track where you've been?
It's a privacy nightmare.
Parent