{"id":13972,"date":"2018-12-01T10:45:09","date_gmt":"2018-12-01T18:45:09","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/12\/01\/news-7739\/"},"modified":"2018-12-01T10:45:09","modified_gmt":"2018-12-01T18:45:09","slug":"news-7739","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/12\/01\/news-7739\/","title":{"rendered":"\u00a0Why a Hacker Exploited Printers to Make PewDiePie Propaganda"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5c01b98be38e7c06c5331775\/master\/pass\/PewdiePropaganda_07.png\"\/><\/p>\n<p><strong>Credit to Author: Louise Matsakis| Date: Fri, 30 Nov 2018 23:12:17 +0000<\/strong><\/p>\n<p><span class=\"lede\">By now, you\u2019ve <\/span>probably heard of <a href=\"https:\/\/www.wired.com\/2017\/02\/pewdiepie-racism-alt-right\/\">PewDiePie<\/a>, a Swedish comedian and video game commentator who has been the most followed creator on YouTube for years. But you might not be as familiar with <a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/a3qb54\/the-rise-of-t-series-the-youtube-channel-that-will-soon-dethrone-pewdiepie\" target=\"_blank\">T-Series<\/a>, an almost equally popular Indian media company.<\/p>\n<p>For months, T-Series and PewDiePie, whose real name is Felix Kjellberg, have been <a href=\"https:\/\/in.mashable.com\/culture\/630\/with-t-series-hot-on-his-heels-could-it-be-pewdiedie-for-pew\" target=\"_blank\">dueling<\/a> over who will be the king of YouTube. In October, PewDiePie even released a <a href=\"https:\/\/www.youtube.com\/watch?v=6Dh-RL__uN4\" target=\"_blank\">diss track<\/a> about T-Series, which has been viewed more than 47 million times. As of Friday afternoon, both channels were hovering around 72.5 million YouTube subscribers.<\/p>\n<p class=\"paywall\">As T-Series encroached on PewDiePie\u2019s number of subscribers, the Swedish star\u2019s fans engaged in a series of stunts to drum up support, including <a href=\"https:\/\/www.youtube.com\/watch?time_continue=8&amp;v=qZNxvnQv0h4\" target=\"_blank\">buying billboard ads<\/a> and hanging up <a href=\"https:\/\/twitter.com\/sumzzam1\/status\/1059011959083872256\" target=\"_blank\">flyers<\/a>. These antics often have the added benefit of garnering attention not just for PewDiePie himself, but also for the people who carry them out: PewDiePie has featured some of his fans\u2019 work in his enormously popular <a href=\"https:\/\/www.youtube.com\/watch?v=d38MrVnBFXg\" target=\"_blank\">videos<\/a>.<\/p>\n<p class=\"paywall\">That brings us to today\u2019s \u201chack,\u201d which isn\u2019t <em>really<\/em> a hack at all, since it doesn\u2019t involve breaking into anything. A self-described \u201chuge\u201d PewDiePie fan and university student says they exploited tens of thousands of internet-connected printers earlier this week to spit out a <a href=\"https:\/\/twitter.com\/georgia_bizzle\/status\/1068162264862244868\" target=\"_blank\">message<\/a> telling people, in part, \u201cPewDiePie is in trouble and he needs your help to defeat T-Series!\u201d The incident was <a href=\"https:\/\/www.theverge.com\/2018\/11\/30\/18119576\/pewdiepie-printer-hack-t-series-youtube\" target=\"_blank\">first reported<\/a> by The Verge. It\u2019s worth noting this <a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/nzqayz\/this-teen-hacked-150000-printers-to-show-how-the-internet-of-things-is-shit\" target=\"_blank\">isn\u2019t the first time<\/a> printers have been hijacked in this way.<\/p>\n<p class=\"paywall\">An anonymous Twitter account, <a href=\"https:\/\/twitter.com\/HackerGiraffe\" target=\"_blank\">@HackerGiraffe<\/a>, popped up Thursday to take credit for the pro-PewDiePie propaganda (though it&#x27;s possible someone else could be responsible for it). In a direct message, the hacker says they first obtained a list of vulnerable printers from <a href=\"https:\/\/www.wired.com\/2013\/07\/shodan-search-engine\/\">Shodan<\/a>, a search engine for internet-connected devices. They then wrote an automated script that causes each affected printer to spit out their message, one after another. The anonymous giraffe says they carried out the attack via <a href=\"https:\/\/hacking-printers.net\/wiki\/index.php\/Port_9100_printing\" target=\"_blank\">open 9100 network ports<\/a>. Essentially, these ports are accessible via the open internet, instead of protected behind a router firewall. (This is what facilitates printing remotely.) The hacker didn\u2019t really need to \u201chack\u201d anything in order to access them. \u201cThe only thing people can do is close their ports, because this isn&#x27;t a vulnerability,\u201d writes @HackerGiraffe. \u201cIt&#x27;s just that these protocols don&#x27;t have options for authentication.\u201d<\/p>\n<p class=\"paywall\">The hacker says he crafted a list of over 800,000 vulnerable printers, but they only targeted 50,000 in order to \u201ctest if this would actually work.\u201d They said they witnessed some errors, but that they believe around 48,000 printers were affected. There are a good number of <a href=\"https:\/\/twitter.com\/shr0000m\/status\/1068581066120839169\" target=\"_blank\">pictures<\/a> of @HackerGiraffe\u2019s printout on Twitter, though there\u2019s no way to verify exactly how many printers were really impacted.<\/p>\n<p class=\"paywall\">In this case, the hacker appears not to have any malicious intent, which is the good news. They claim their motivation is not only to support PewDiePie, but also to warn people about the dangers of leaving their network ports open on the internet. \u201cI killed two birds with one stone, raised awareness for this issue and helped PewDiePie get a slight edge,\u201d writes @HackerGiraffe.<\/p>\n<p class=\"paywall\">The bad news is, the hacker also says their attack was easy to execute. The script they wrote, which was shared with WIRED, is extremely short. \u201cThis entire process could have been carried out by a 12-year-old and could have had grave, grave consequences,\u201d they wrote. \u201cI could have physically damaged printers. Caused organizations hundreds of dollars in ink and paper.\u201d<\/p>\n<p class=\"paywall\">The giraffe has a point. Many <a href=\"https:\/\/www.wired.com\/story\/elaborate-hack-shows-damage-iot-bugs-can-do\/\">internet-connected devices<\/a>\u2014including printers, but also things like <a href=\"https:\/\/www.wired.com\/2016\/01\/nyc-investigating-hackable-baby-monitors\/\">baby monitors<\/a>\u2014have been found to be <a href=\"https:\/\/www.wired.com\/story\/upnp-router-game-console-vulnerabilities-exploited\/\">easily hackable<\/a>. As more and more gadgets are connected to the internet, there are far greater opportunities for bad actors to try to break into them. This isn\u2019t even the first time a young hacker brought attention to this exact issue. In 2017, a <a href=\"https:\/\/motherboard.vice.com\/en_us\/article\/nzqayz\/this-teen-hacked-150000-printers-to-show-how-the-internet-of-things-is-shit\" target=\"_blank\">self-described<\/a> \u201cpissed off high school student\u201d said they hacked more than 150,000 printers using open ports.<\/p>\n<p class=\"paywall\">In both the 2017 case and this more recent one, the attackers had fairly benign intentions, though they certainly wasted lots of ink and paper. But that hasn\u2019t always been the case: In 2016, hacker Andrew Auernheimer, also known as weev, exploited printers to print racist and anti-Semitic flyers, also by using open ports.<\/p>\n<p class=\"paywall\">There\u2019s a simple and evergreen lesson in all of these incidents: Make sure your devices aren\u2019t exposed on the open internet.<\/p>\n<p class=\"related-cne-video-component__dek\">Hacker and security researcher Samy Kamkar takes a look at a variety of hacking scenes from popular media and examines their authenticity.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/pewdiepie-printers-propaganda-hack-brief\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5c01b98be38e7c06c5331775\/master\/pass\/PewdiePropaganda_07.png\"\/><\/p>\n<p><strong>Credit to Author: Louise Matsakis| Date: Fri, 30 Nov 2018 23:12:17 +0000<\/strong><\/p>\n<p>An anonymous hacker has claimed credit for the prank, which is part of an ongoing YouTube subscriber feud.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714],"class_list":["post-13972","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/13972","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=13972"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/13972\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=13972"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=13972"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=13972"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}