Path: ...!news.roellig-ltd.de!open-news-network.org!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Lawrence D'Oliveiro <ldo@nz.invalid>
Newsgroups: comp.os.linux.advocacy
Subject: Re: 9.9/10 vulnerability revealed: it's the printers!
Date: Fri, 27 Sep 2024 00:28:30 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 16
Message-ID: <vd4u7e$e1oh$1@dont-email.me>
References: <0YlJO.19672$MoU3.8316@fx36.iad>
	<poubfjlh0812tgduaduqoqghrk661i47f6@4ax.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 27 Sep 2024 02:28:31 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="62b490d00f3035d741a9330a9ab78fbd";
	logging-data="460561"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1+2hYo+xLC4IQjISqJPs5jn"
User-Agent: Pan/0.160 (Toresk; )
Cancel-Lock: sha1:b1jj3Zcpy+NarDvnTgG5xRBThtw=
Bytes: 1579

On Thu, 26 Sep 2024 20:24:48 -0400, Joel wrote:

> I have a scanner, but no printer.

Do you have CUPS installed? The problem is that cups-browsed, the service 
for dynamically discovering printers on the network, is a little too 
trusting of the responses it receives. Does

    ss -nlu sport = 631

show any listeners on UDP port 631 on your machine? If so, you can stop 
and disable cups-browsed with

    systemctl disable --now cups-browsed.service

and then the above “ss” command should show nothing.