Update that makes HP printers paperweight with non-genuine ink confuses experts as CEO says it's a ``measure against virus-infected ink''

HP CEO Enrique Lores said in an interview about the controversial update that caused printers to stop working if they used third-party ink cartridges, saying, ``There is a possibility that non-genuine ink cartridges may contain viruses.'' 'Because there is.' Security experts say the chances of such an event occurring are limited and would only occur if a nation-state were to attempt to hack an individual.

HP CEO evokes James Bond-style hack via ink cartridges | Ars Technica
https://arstechnica.com/gadgets/2024/01/hp-ceo-blocking-third-party-ink-from-printers-fights-viruses/

HP cites threat of viruses from non-HP printer cartridges to justify blocking their use, experts sceptical - NotebookCheck.net News
https://www.notebookcheck.net/HP-cites-threat-of-viruses-from-non-HP-printer-cartridges-to-justify-blocking-their-use-experts-sceptical.795726.0.html

HP has been eliminating third-party ink cartridges since 2016, when it introduced Dynamic Security, which prevents printers from using non-genuine ink cartridges, often drawing anger from consumers. It has been hit with a class action lawsuit .

Users' anger explodes as HP updates ``printer refuses to print if non-genuine ink is used'' - GIGAZINE

In an interview with American television station CNBC Television, HP CEO Lores justified this practice on security grounds when the subject of installing third-party ink cartridges in printers turned them into bricks. Did.

'Ink that is not designed for use in our printers may cause the printer to malfunction or pose a security issue. 'We have confirmed that there is a risk that the virus could reach printers and networks,' said Lores.

Ars Technica, an IT news site, solicited opinions from cybersecurity and printing press experts through Mastodon on whether ink cartridges can really be infected by computer viruses, but the response was negative.

For example, Stephen M. Bellovin, a security researcher and professor at Columbia University's School of Computer Science, said, ``From a pure threat modeling perspective, unless a nation-state orchestrates such an attack, I would I'm skeptical.'


In addition, Michael Miller, who has worked in the printing industry for 30 years, said, ``As someone who has worked for an inkjet printer company different from HP, I can tell you that if you maliciously inject a virus into a cartridge, If it can be programmed, I think it's a pretty bad engine design.The amount of information that can be stored on a cartridge is very small, and if the data isn't in the expected format it can be rejected as invalid (this is HP's specialty). I hope the proof of concept (POC) proves me wrong, but it feels like a fear, anxiety, and doubt strategy (FUD) to fuel anxiety to me. 'Hmm,' he said.


According to Ars Technica, there was evidence that it is possible to hide data in the memory installed in the ink cartridge. However, even the Mastodon user who gave the testimony commented, ``CEO Lores' claims are absurd not only in a normal environment but also in a research lab, not only for a big-name politician, but even more so for a company or individual.''

HP's claim has some basis. A 2022 security study funded by HP showed that ink cartridges manufactured by manufacturers other than HP can be used to install malware that controls printers. However, there have been no reported cases of such hacking occurring in the real world.

In addition to security, Mr. Lores also cited protection of the printer's intellectual property (IP) and reduction of unprofitable customers as reasons, and Ars Technica points out that this is HP's true intention.

◆Forum now open
A forum related to this article has been set up on the GIGAZINE official Discord server . Anyone can write freely, so please feel free to comment! If you do not have a Discord account, please create one by referring to the article explaining how to create an account!

• Discord | 'Are you using genuine printer ink? Are you using a third-party product?' | GIGAZINE
https://discord.com/channels/1037961069903216680/1200014177587167292