HP Printers Sends Back Data to HP Though Instant Ink program
HP has been aggressive with their printers, in the past detecting and blocking non-HP cartridges and what now. There's a new low though, as it turns out the latest generations printers send back info and telemetry to HP.
HP is sending back data on what you print how many times and what now, so far that's all fine. Now I know. We live in an age and era where all data is grabbed, that includes your entire life from things on and usage of your smartphone up-to OSes and graphics cards drivers sending back telemetry up-to-the Facebooks and other services.
Robert Heaton did a bit of research and the Instant Ink program monitors our printer so that when you run out of Ink, you instantly get send a new batch. However, it's just not Ink data info that HP is retrieving. By enrolling in the Instant Ink service, you are authorizing HP to remotely monitor page count, ink levels, the type of documents you print, the type of device you use to print a particular document and whether the last cartridge you used was new or used. Again so far, that's okay. They are also allowed to use and share (inevitably could sell) your information like name, address, email, printer model, printer serial number with the retailer that you purchased the subscription from.
"In summary, HP wants its printer to collect all kinds of data that a reasonable person would never expect it to. This includes metadata about your devices, as well as information about all the documents that you print, including timestamps, number of pages, and the application doing the printing (HP state that they do stop short of looking at the contents of your documents).
Product Usage Data – We collect product usage data such as pages printed, print mode, media used, ink or toner brand, file type printed (.pdf, .jpg, etc.), application used for printing (Word, Excel, Adobe Photoshop, etc.), file size, time stamp, and usage and status of other printer supplies. We do not scan or collect the content of any file or information that might be displayed by an application.
Device Data – We collect information about your computer, printer and/or device such as operating system, firmware, amount of memory, region, language, time zone, model number, first start date, age of device, device manufacture date, browser version, device manufacturer, connection port, warranty status, unique device identifiers, advertising identifiers and additional technical information that varies by product."
Note the last column in this “Privacy Matrix”, which states that “Product Usage Data” and “Device Data” (amongst many other types of data) are collected and shared with “service providers” for purposes of selling data. The problem here that if the data would be anonymous it would be fine, however, HP seems to be collecting more info than needed for your Ink refresh as opposed to running statistical values.
It's a bit of a fine line where HP is balancing on, then again, maybe an acceptable one for those that join that program. Then again, if you want ink to be send at your home, HP is going to need a certain amount of your data. It's just how they use it though.
More than HP printer models vulnerable to two very critical vulnerabilities - 08/07/2018 08:31 AM
Over a hundred HP inkjet printers are vulnerable to remote code execution vulnerabilities that are classified by HP as critical. By exploiting the vulnerabilities, an attacker could remotely execut...
Firmware exploit could set some HP printers on fire - 11/30/2011 12:57 PM
Well, in odd news today, security researchers discovered printers from HP and possibly other printer makers are vulnerable to firmware exploits. Affected printers connect to the Internet and use a &qu...
Senior Member
Posts: 244
Joined: 2016-10-19
We're long overdue binding legislation that forces all companies to detail exactly what data they are receiving at their end - and provide an additional copy that into to the user. Of course, that would only be a small token gesture...disassembling the code might be fruitful. OS's could help more too. I'm sure my smart toilet roll is sending stuff back!!
Senior Member
Posts: 1309
Joined: 2003-09-14
This probably falls foul of the European data collection Laws...
Senior Member
Posts: 6793
Joined: 2008-03-06
Seems like everybody wants a piece of the cake.
Where are the times when someone just entered the store, cash in hand and bought toner or ink cartridges?
No, we want your unborn children, all of your data and a signed affidavit.
Wait, only terrorist use cash. Of my, how can I say such things.
/rant end.
Senior Member
Posts: 2599
Joined: 2006-09-02
one day, we will need to be online just to print a simple doc, i guarantee it.
Posts: 6073
Joined: 2011-01-02
Oh no! All my dickbutts are sent to HP