How i Hacked An Internet Connected 3D Printer.
Hello everyone, it’s been long time since i last wrote any story for you all. So today i am going to write on ‘how i hacked internet connected 3D printers’. Stay tuned for more hacking fun;)
Facts related to 3D printers:
- 3D Printing Started in the ‘80s’.
2. 3D printing was primarily used for prototyping, but is now being used for production-ready pieces.
3. You can print in titanium, ceramics, wood, etc!
4. 3D printing is used in marketing by various corporations.
5. Will surpass big records in the industry.
6. They are used in school, colleges for better education trainings.
These were the facts or advantages of 3D printers. Now, let’s discuss negative side of 3D printing. :(
- Toxic air emissions.
2. 3D printers are energy hogs.
3. Reliance on plastics.
4. Moving Parts.
5. High Voltages.
For detailed reports visit these websites:
Now, let us move forward to the main content for which we all are here ;)
So today while surfing different blogs and finding information about various IoT devices i came across a search query that returns internet connected 3D printers that are publicly accessible. Few of them were having current printing job in progress while others were idle. The search query i used was: title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944
I instantly opened few of the returned search results and messed up with on going printing jobs. Once instance is here:
This printer was located in U.S.A and was printing a 3D model of a chariot. From a attacker’s point of view one cause a lot of damage to this asset which can cause quite a lot of Dollars to recover the printer in proper working stage. I won’t discuss them all here for obvious reasons.
- Modify printing activity: One can pause, cancel or slow down the current printing job and delay printing or change the end output of the model.
- Breaking down printer: Attacker can change fan speed, temperature which may result in printer getting over heated and chances of catching fire.
3. Clearing intrusion traces: Attacker can delete activity traces and time lapses to prevent any suspicion.
4. Data Leak: Attacker can download source codes for model. This can be a bad incident if the printer is printing something that if gone in wrong hands may not result in a good work. Ex- College projects, samples getting leaked, etc.
5. Modify login control: A successful intrusion may result in admin panel login and other printer securities changed.
You could cause a lot of damage if you have successfully hacked a 3D printer.
Now, let’s move forward to last topic of our story. Securing internet connected 3D printers.
Securing internet connected 3D printers:
- Pick good password for login.
2. Secure your WiFi network.
3. Use a stand alone firewall.
4. Keep your device up to date with latest firmware updates.
Risk assessment:
This story is not detailed as IoT hacking and counter measures but still this much information should be enough to make people understand of the threats IoT devices are receiving continuously.
Closing Note:
Unfortunately, a clear IoT standard has yet to emerge, and it is difficult to say if any consensus is in sight.
