Slashdot Log In
EFF Requests Help to Identify "Evil" Printers
Posted by
Hemos
on Wed Jul 27, 2005 03:09 PM
from the flagging-them-out dept.
from the flagging-them-out dept.
jason writes "In preparation for a possible legal challenge, The Electronic Frontiers Foundation is requesting your help in identifying which printers are embedding traceable information in the documents they produce. Printer manufactures added this technology under persuasion from the government inorder to help combat counterfeiting operations, however this technology defeats the presumed anonymity most people expect from the documents they print."
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Tinfoil printouts (Score:4, Interesting)
The millimeter-sized dots appear about every inch on a page, nestled within the printed words and margins.
Can anyone produce a human-readable example of this?
Perhaps it's time to unfold my tinfoil hat and use it to cover my printouts instead.
Re:Tinfoil printouts (Score:5, Informative)
The dots' minuscule size, covering less than one-thousandth of the page, along with their color combination of yellow on white, makes them invisible to the naked eye, Crean says. One way to determine if your color laser is applying this tracking process is to shine a blue LED light--say, from a keychain laser flashlight--on your page and use a magnifier.
Parent
Scary stuff (Score:5, Interesting)
Of course, I suspect that any sufficiently advanced forensic analysis of a document could probably tie it to a printer. However, the fact that these are documented is what bothers me. I.e. the FBI need only ask Xerox which printer produced a specific document and they can tell them.
The USSR used this sort of scheme to censor writers and ensure that if someone spoke out they could be easily traced. What is to prevent any government from making the same requirements of any company?
Parent
Re:Tinfoil printouts (Score:5, Interesting)
(The Slashdot "lameness" filter prevents me from posting the entire diagram.)
Now it seems to me that Open Source has an answer for this. Can we patch Xerox printer drivers so that they automatically print the yellow dot at all 120 locations, making each page bear a fake serial number of "FF FF FF
Or if the drivers aren't open source, can we write proxy printer drivers that add the dots and then forward to the real Xerox print driver?
Who'll take on this challenge? (Preferably a good linux coder who isn't a US citizen or resident.)
Parent
I work for a manufacturer (Score:5, Informative)
I work for a large printer/copier manufacturer in the technical services area (IT related) and can confirm we've been doing this for MANY years in our colour products.
We refer to the technology as "micro dots". Each dot can uniquely identify the device by it's serial number (which is not only printed on a label but also hardcoded in to the machine).
I also happen to live in Australia, where it'd be a cold day in hell before we told anyone who didn't have a court order the serial number of a printer that produced a page or who we sold it to.
The dots are MUCH smaller than 1mm as suggested here, however I can confirm that yellow toner is used. If you have a good magnifying glass (at least 8 times) and a sharp eye you can spot them, but it's really not easy.
Additionally, our machines all have anti-counterfeit technology anyway. If you try to print or copy a banknote from any major world currency, all you'll get is a black square and possibly an error code being displayed on the panel.
In the entire time I've worked for this company, we've never once had to do a micro dot check for the police/government/whatever - I'd know because there's only about 3 or 4 of us in the company that have the knowhow to do it and they all work in my department. (no, the govt doesn't know how to do it themselves and even if they did, they'd still need to ask us where that serial number is now).
I've deliberately avoided mentioning my employers name in this post. I'm pretty sure I haven't broken any confidentiality agreements with this post (all I'm doing is confirming, not supplying new info) but you can't be too careful. Suffice to say, I don't think it matters which major manufacturer, I'd bet my bottom dollar we all do it.
Parent
Yeah, I can see it. (Score:5, Funny)
Each dot can uniquely identify the device by it's serial number
I can see the extra dot added, between the "t" and "s" of "its".
I thought they were meant to be yellow?
Parent
Conspiracy theory for the day (Score:5, Insightful)
OK, so let me be sure I understand this.
You're telling me that your printers always include a dot, printed with yellow toner, visible only with an 8x magnifying glass, in which is encoded enough information for you to identify exactly which printer that you made was responsible for printing that page?
Sorry, but if that's all you've got, I call bullshit. Too much doesn't add up.
Printer manufacturers have high enough resolution to do this, yet only put out 600dpi/1200dpi boxes, where you can easily enough see jaggies with the naked eye?
If the dots are really that small, they could be messed up just by bleed in average quality printer paper.
Alternatively, this isn't a microdot in the classic meaning of the term, but rather the system is supposed to rely on the relative positions of the dots on the page, with dots spaced inches apart? How is that going to help fight conterfeiting? I don't know many bank notes that come in handy US letter or A4 size for counterfeiting convenience.
You say your department has never had to look up a serial number for the authorities, yet strangely according to TFA, the authorities seem to do this all the time with other makers?
Only a tiny number of people in your department know how to do this, it's all so secret that other printer manufacturers cited in TFA wouldn't even comment and you can't tell us how to find the things, yet you're prepared to identify your employer, thus practically waving a flag about who you are and the fact that you're willing to disclose this sort of information?
There's no obligation to register where you buy your printer, nor to notify anyone of selling it on, so there's nothing to connect to the serial number unless someone bothers transferring warranty information (even after the usually pretty naff warranty has expired).
And here's the kicker: governments all over the world use these things. If there were security marks being printed on their documents, they would know about it, not least because they all do it routinely with confidential documents themselves. How am I supposed to believe that government departments are allowed to use these things when anything they print could be traced back to exactly where it comes from by someone who isn't cleared by that government's security people, and works in another country?
Sorry, but this just doesn't ring true. There is absolutely no factual information in either TFA or all your posts to this thread that's good enough to reproduce this effect reliably, and what's more I'm looking at full-page print-outs from two colour printers, following the directions given in TFA, and unable to see anything even remotely resembling what's described.
I'm happy to change my view on this if more information is provided, but I'm very sceptical about this whole story right now.
Parent
Re:Conspiracy theory for the day (Score:5, Interesting)
Parent
Re:Tinfoil printouts (Score:5, Informative)
The Lexmark Optra N I'd used for several years at work turned out to be one of these. VERY faint yellow dots on the white parts of the border (I didn't test it on anything full-bleed though, so no idea what it would look like under those circumstances).
I'd used that printer for light-to-moderate graphics work for a long time, and never noticed. Heck, I barely noticed when I knew what to look for, but it was most certainly there.
Parent
Do as I say, not as I do (Score:4, Insightful)
Re:Do as I say, not as I do (Score:5, Insightful)
Which is exactly why it should be REQUIRED for all government offices, and optional for citizens. Remember, "Where the people fear their government, there is tyranny, where the government fears its people, there is Liberty." - T. Jefferson (? sorry, quote's off the top of my head)
Parent
Re:Do as I say, not as I do (Score:5, Interesting)
There was an interview on NPR a few weeks ago with Michael Smith, the British journalist who uncovered the "Downing Street Memo." He said that governments already do this: when a classified document is distributed, they often introduce subtle changes in wording from one copy to the next, so that each person receives a very slightly different copy. That way, in theory if the document is leaked, they can figure out who leaked it.
Parent
For once that "Soviet Russia" thing applies (Score:4, Interesting)
The US Government has removed the ambiguity from this process, and made it far easier to definitely tie a document to a printer.
Well, except for the fact that I'm sure the government has a couple printers lying around that can add whatever serial number and printer model they want.
Parent
Re:As they should (Score:4, Funny)
Sir Humphrey: "Bernard, the Official Secrets Act was not put in place to protect the secrets, it's there to protect the officials."
And
Sir Humphrey: "In the spirit of "Open Government", one should always make public anything that can easily be discovered by some other way."
Parent
"Evil" Printers? (Score:5, Funny)
(I got it first!!!)
Re:"Evil" Printers? (Score:5, Insightful)
Parent
Re:"Evil" Printers? (Score:5, Insightful)
Parent
Re:"Evil" Printers? (Score:4, Insightful)
Don't confuse legality and morality; they are unrelated.
Parent
Yes, Evil. (Score:5, Interesting)
The EFF is concerned about this technology because they've read their history books. And because some people who participated in writing the history books... had to be very careful about what they printed those books on. And because the systems of government used in the Warsaw Pact countries from 1917-1991 was - to many people, myself included - "evil".
I posted this a few months ago, the last time the topic came up. This is not just about counterfeiting. (And as a guy who likes money, I hate counterfeiters with a passion almost equalled to my hatred of spammers, which is pretty freakin' intense.)
In Soviet Romania [google.com] [google.com], a sample page from every typewriter had to be registered with the police, so that any samizdat produced could be quickly traced back to the typewriter's owner. Use your imagination as to what happened to the owner, or Google for it.
In Soviet Russia [geocities.com] [geocities.com], all photocopiers were registered with the KGB and kept in secure rooms, to which physical access was restricted.
The West is probably still playing catch-up.
Parent
I understand now! (Score:5, Funny)
Here's one (Score:4, Funny)
Then again, I just use it to print listings, it's not exactly photo-quality...
Finding Evil Printers (Score:5, Funny)
Dead giveaways (Score:5, Funny)
Getting the word out (Score:5, Interesting)
Re:Getting the word out (Score:5, Informative)
And EF Canada *is* still around.
Parent
Do an exchange... (Score:5, Funny)
Send your current model color laser printer to me. I'll even send you a 7 year old inkjet that I currently use as a footrest.
Epson 1280 photo printer (Score:4, Informative)
If I print anything, even one line of text from notepad, it will print the text, advance the sheet of paper most of the way, print something else you can't really see, then spit out the paper.
I think this is a good test. If you are printing only to the top of the page, and then it appears to spend time printing where you had no text, you've got one of these...
-Joejoejoejoe
If you print a single line of text in notepad... (Score:5, Funny)
Parent
Stupid question but... (Score:5, Insightful)
Assume I had the common sense to only use the printer for counterfeiting. What exactly do they do now? Get a warrant for every house within 50 miles of said Office Max, and check the serial number on all the printers?
Re:Stupid question but... (Score:5, Insightful)
Say there are CCTV tapes that still exist; each is checked for the POS timestamp. Each face is added to a 'question' list. You get a knock on your door when someone recognizes you or from your drivers license photo.
Say you left fingerprints on the paper you used to print the bogus green backs.
Say you go to stock up on Green Dye number 5 and trigger an alert clerk to write down your license plate, since the Feds had already passed out flyers stating to be on the lookout for individuals purchasing large quantities of this ink as it was used to finance terrorism (we all want to help, right?). Never mind the cash reward.
Say you buy more quality linen paper reams and someone notes the sale within 200 miles of your OD.
Say they just get damn lucky and lookup your slashdot ID.
There are hundreds of ways to screw up when you've broke the law. They just need one break. You need a perfect record of not making one.
Parent
Re:Stupid question but... (Score:4, Informative)
Parent
I Wonder (Score:5, Interesting)
And here I was thinking all along that it was just a crappy printer that messed up every inch or so.
Maybe I could add a few more of mine in Photoshop just to make things more interesting.
Better that than suggesting that Xerox (and Canon and HP) should be shot for caving into foreign governments who use this to suppress free speech, all the while not telling us that they're doing it.
Evil Printers... (Score:5, Insightful)
It's nice to see the EFF trying to stamp out the evil printers. But there's a lot of work to be done.
Ask Publius about this (Score:5, Insightful)
Somebody ask
- Alexander Hamilton (later the first Secretary of the Treasury of the United States, the same Treasury that Lorelei Pagano now works for),
- James Madison (later fourth President of The United States), or
- John Jay (later first Chief Justice of the United States Supreme Court)
why they published the Federalist Papers anonymously under the name "Publius".Ask them if they'd have been able to write the these brilliant arguments that shaped the Constitution of the United States of America if the very paper they'd printed it on could have been used to strip then of their anonymity?
Could they have made their arguments as forcefully, would they have allowed their ideas to have been so revolutionary, if they had known any political opponent could trace those papers back to them, perhaps deny them jobs or political offices because of disagreement with their ideas?
Would we even have the Constitution that we have today if these great men had not been able to use the pen-name "Publius"?
Hamilton and Madison and Jay forged (ahem) our Constitution in anonymity, but counterfeiting specialist Lorelei Pagano tells us that those three silly boys didn't need their anonymity? That in order to be safe from counterfeiters, we have to give up our right to anonymous politically agitation?
How much more security can this country -- this nation conceived in anonymity -- survive?
anonymous coward (Score:5, Funny)
I wonder if they used their karma bonus though?
Personally I'm guessing they did it so the British or anyone else didn't mod them '-1 DEAD!'
Parent
Defeats the presumed anonymity.. (Score:5, Insightful)
Printed pages are NEVER anonymous. Apart from fingerprints, DNA traces, ink and paper matching, how many people print stuff that they pass out anonymously? Most letters have a sender, books and other prints have a copyright note. And once you distribute any printed materials, others can trace it back.
If you go to the trouble to buy the printed at Best Buy at a best buy 500 miles from your home with cash that you got from a bank while wearing a full body condom and face mask, don't transport it in your car, and keep it in a clean room at an anonymous location, I agree that you probably expect privacy. But at that point, you have probably been arrested as a weirdo somewhere along the way.
My Database is Bigger than Yours (Score:4, Insightful)
Do this, and the EFF will have a larger, more diverse database of printer identifications than any manufacturer. And just where's their Privacy Policy on this?
Missing the point... (Score:5, Insightful)
"They" will never find a counterfeit document and then look for the printer, they will find the printer and then link the documents printed as corroborating evidence. This will be used once a suspect is available and a with a search warrant present and the printer seized, now with the micro-dot encoded serial number they can prove that Document A was definitely printed on Xerox Model X3Y Serial number: sdf78s6d5sdf46s4df98 which resides in the office a Mr. John Q. Public. at 321 Main St. Spingfield, MA; this removes plausibly deniability from the case. No more will a printed document carry any form of anonymity, there will be no reasonable doubt if this is called into evidence at a trial, do you REALLY want an almost iron-clad evidence of every document printed to be available?
Replace the yellow ink? (Score:5, Insightful)
Ittsy-bittsy-dots... (Score:5, Informative)
Retail photocopiers wont catch the yellow-on-white and the small size of the dot because their resolution is too crappy. The copier does the work of getting rid of your tracks.
Now burn the originals and leak anonymously!! Woohoo.
Re:Ittsy-bittsy-dots... (Score:5, Informative)
Parent
Irony (Score:5, Interesting)
At least they're not photographing train stations, public parks, or doing something else equally dangerous to national security, but just think of the intelligence goldmine present in all those test pages being sent to the EFF. A goon...er...security agent could get a promotion out of this!
In Soviet Russia (not a joke) (Score:5, Interesting)
The US will not make the same mistake the USSR did. If another Bulgakov surfaces in Dubya's America, this printer-ID technology will rat him out before that freedom-hating Nobel Prize Committee has a chance to work its evil. Why does the EFF hate America?
Counterfeiting? At /these/ prices? (Score:5, Funny)
Re:This might help out my business... (Score:5, Funny)
Some amateur counterfeiter was driving around the Appalachians to find some hillbillies to swindle. He found a couple of dumb-looking guys sitting on their front porch, stopped the car and said, waving a freshly printed note: "any of you guys have change for a $18 bill?". One of the guys reach in his pocket and says: "sure, d'ya want 2 nines or 3 sixes?"
Parent
Like, say, printing flyers for a protest? (Score:5, Insightful)
Parent
Re:Umm... (Score:5, Insightful)
So, in your view, privacy is unimportant unless you have something to hide? In that same vein, if you want privacy, are you automatically a criminal?
Let's say the government wants to put a chip in your car that tracks your movements ("to fight terrrorism"), Do you have anything to hide then? Perhaps you're going to terrorist school... shouldn't the cops know about that? Why not place the chip directly in your arm just to be safe? Why not, then have everyone get permission from the government to move around the country? If they have nothing to hide, why should it be trouble to ask for permission? Why should people protest the actions of the government if they love their country? Perhaps they are criminals too.
The invasion of privacy is something we must always fight, because it's a slippery slope, and we will never get back what we once had. The loss of privacy means the death of democracy.
Parent
Re:The first thing I think about.... (Score:4, Insightful)
You want to stop counterfitters? Design real money, instead of the single-colour, same sized bills that they keep making. Take the mom-and-pop operations out of the picture, then work on the foreign governments, and organized criminals.
Parent
Re:Snakeoil? (Score:5, Funny)
Parent
Re:Greenpeace? (Score:5, Funny)
Parent