WeWork Employees Used an Alarmingly Insecure Printer Password (techcrunch.com) 29
A shared user account used by WeWork employees to access printer settings and print jobs had an incredibly simple password -- so simple that a customer guessed it. From a report: Jake Elsley, who works at a WeWork in London, said he found the user account after a WeWork employee at his location mistakenly left the account logged in. WeWork customers like Elsley normally have an assigned seven-digit username and a four-digit passcode used for printing documents at WeWork locations. But the username for the account used by WeWork employees was just four-digits: "9999". Elsley told TechCrunch that he guessed the password because it was the same as the username. ("9999" is ranked as one of the most common passwords in use today, making it highly insecure.)
The "9999" account is used by and shared among WeWork community managers, who oversee day-to-day operations at each location, to print documents for visitors who don't have accounts to print on their own. The account cannot be used to access print jobs sent to other customer accounts. Elsley said that the "9999" account could not see the contents of documents beyond file names, but that logging in to the WeWork printing web portal could allow him to release other people's pending print jobs sent to the "9999" account to any other WeWork printer on the network.
The "9999" account is used by and shared among WeWork community managers, who oversee day-to-day operations at each location, to print documents for visitors who don't have accounts to print on their own. The account cannot be used to access print jobs sent to other customer accounts. Elsley said that the "9999" account could not see the contents of documents beyond file names, but that logging in to the WeWork printing web portal could allow him to release other people's pending print jobs sent to the "9999" account to any other WeWork printer on the network.
Re:Hunter2 (Score:5, Funny)
Re: (Score:3)
We need to know!
All I see is *'s
Re: (Score:2, Insightful)
Should that be plural laptop_s_? Based on the news coming out he left these around various places like a Pokemon afficianado. Which makes no sense really...
Re: (Score:3)
and then... (Score:2)
They were able to print something.. like.. ON REAL PAPER, omg we need to put a stop to this madness.
Still around? (Score:4, Insightful)
Re:Still around? (Score:5, Funny)
I'm mildly surprised that WeWork hasn't imploded yet, given the "out of office" working model imposed by the pandemic.
Yep. I would have thought that they would have changed their name to WeClosed.
Nein! (Score:2, Funny)
Teapot? (Score:2)
Sounds like a tempest in a teapot to me.
Not a problem (Score:2)
Weak security on stuff that is only supposed to be marginally secured is fine. Like companies that use "guest" as a password to get onto the guest wifi, it's not an issue. It's not supposed to be secure, nor is it important.
Re: (Score:3)
Re: (Score:2)
This wouldn't let people directly access the printer. It's a log in to a shared account on a web portal that lets people print to any WeWork printer in the world. Woo-hoo. And because it's a shared account, if you log in you can cancel, prioritize, or reroute to a different printer the jobs that are printing under that account. The same as a shared print queue you control. Because that's all it is.
I suppose if you can send a corrupted PDF that puts the malware on the printer, this could be an anonymous
Took me quite some time (Score:2)
OMG, he could've printed something! (Score:1)
Re: (Score:2)
Kid, let me introduce you to infinite loops in Turing-complete PostScript! :)
BTW: Anyone ever written a PS virus?
butt copy (Score:2)
the last person who tried that broke the glass on the copier.
Who gives a ceap? (Score:2)
Some random people from a defunct criminal organization used a bad password?
Whooo!! Scary!
Did you check if there also was a bag of rice falling over in China at the same time, and the world promptly ended!?
A very old password (Score:1)
Re: (Score:2)
Saws (Score:1)
Re: (Score:1)
pfff, I am safe! (Score:2)
"9999" is ranked as one of the most common passwords in use today, making it highly insecure.
I use 0000 for everything. Glad to hear I am safe!
First, who the fuck needs to print? Anything. (Score:2)
thanks (Score:1)