From: Gary Warner (garaskgar.com)
Date: Thu May 08 2008 - 20:33:04 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Paul Melson wrote:
>> what would be the greatest risk if network admin leave Network printers
>>
> without password protected.
>

Actually, my favorite demonstration of how EVERY DEVICE ON THE NETWORK
MUST BE SECURE was to find a printer on the same subnet as something
sensitive (Mainframes work nicely for this demo) and then change the IP
address of the printer to match the IP address of the mainframe.

If there isn't a sensitive server handy, setting the printer to have the
same IP address as the Default Network Gateway for its network segment
is also an effective demo.

--

--------------

Gary Warner
Director of Research in Computer Forensics
The University of Alabama at Birmingham
garcis.uab.edu garaskgar.com

--------------

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]