News for hackers. Stuff that matters.
Re:Windows 0day privilege escalation still not fixed by Meph504 on Wednesday December 23, 2020 @01:52PM (#25520743)
I would agree I was baffled how basically windows will take anything from print drivers and ram it into the spooler.
Re:Windows 0day privilege escalation still not fixed by tonyedgecombe on Wednesday December 23, 2020 @04:19PM (#25522340)
Also I suspect nobody wants to work on it because who wants to do printing.
Re:Windows 0day privilege escalation still not fixed by asveikau on Wednesday December 23, 2020 @06:39PM (#25523577)
I actually think working on printing infrastructure might be fun. There is image processing, font rendering, etc. which are fun niches. And you can see something physically tangible from your work.

It's not going to increase in relevance or take over the world, but it is probably satisfying.

Re:Windows 0day privilege escalation still not fixed by x0x0 on Wednesday December 23, 2020 @08:36PM (#25524321)
I strongly suspect it's a haphazard, under-tested mess of compat hacks to work with thousands of models of printers, with thousands of quirks and bugs that Microsoft has painfully worked around to take care of their customers.

As opposed to Apple, who just assumes you don't use printers older than 2 years and liberally breaks old printers and scanners.

Re:Windows 0day privilege escalation still not fixed by asveikau on Wednesday December 23, 2020 @09:42PM (#25524594)
App compat hacks can be a fun sport for the right kind of person. I was on the Windows team for a few years and I sometimes looked at those or saw posts about them on mailing lists. It can get interesting.
Re:Windows 0day privilege escalation still not fixed by rbanffy on Thursday December 24, 2020 @10:28AM (#25528275)
Printing was complicated in those days because a computer couldn't hold a bitmap of a printed page in memory and still do anything. Early PostScript printers were also much more powerful than the PCs that drove them, often with 32 bit RISC CPUs, dozens of megabytes of RAM and some even had SCSI disks.

Now that most computers can hold a page in their L2 caches, it's easy and much faster to render in-memory and send a bitmap over to the printer driver to let it print with whatever options it wants. All the driver needs is to accept a bitmap and print it as well as it can and you can safely ignore most of the printer's own PDL.

Most of the thorny issues in printing are with special-purpose printers - thermal, barcode, embedded text only, etc.

Apple uses CUPS and it should work fine with older printers. Last time I checked, CUPS could handle an HP Deskjet 500 (if you have the parallel port)

Re:Windows 0day privilege escalation still not fixed by tubs on Thursday December 24, 2020 @07:39PM (#25533069)
Fun story I heard from an aerospace engineer - they were running some heavy simulations and producing graphs.

He found the printer that was emitting the graphs was actually more powerful than the (very expensive) machines running the simulations, to the point that converting the simulation to postscript (or some variant thereof) and running it directly on the printer was some orders of magnitude faster.

Re:Windows 0day privilege escalation still not fixed by rbanffy on Friday December 25, 2020 @05:51AM (#25535694)
Indeed. I've seen printers churn out beautiful fractals at a fraction of the time it took 68K Macs to do it.
Re:Windows 0day privilege escalation still not fixed by j16sdiz on Wednesday December 23, 2020 @09:04PM (#25524428)
> There is image processing, font rendering, etc.

And stump upon sb else code that you have no permission to modify

Re:Windows 0day privilege escalation still not fixed by m-p-3 on Wednesday December 23, 2020 @05:34PM (#25523060)
That must be some kind of purgatory where developers goes to slowly die inside.
Re:Windows 0day privilege escalation still not fixed by tonyedgecombe on Thursday December 24, 2020 @10:17AM (#25528152)
I said it somewhat tongue in cheek because I have been working with printing technologies for my whole career.
Re:Windows 0day privilege escalation still not fixed by sosodev on Wednesday December 23, 2020 @06:53PM (#25523679)
I’ve been working on a printing related project at my job and it’s been awful. Printers are the worst.
Re:Windows 0day privilege escalation still not fixed by fuzzfactor on Thursday December 24, 2020 @12:01AM (#25525189)
In the 1980's with MS-DOS you started out printing without a print spooler.

When IBM chose the I/O ports for the PC, they used a parallel port compatible with early office printers from Centronics, but used a female DB-25 connector (previously seen mainly on external serial RS-232 modems) on the PC. The printer end of the cable had the Centronics type connector.

By that time Centronics and other pre-DOS printers were already issued with standard or optional serial RS-232 input, or parallel.

Serial printers most often still used a DB-25 like modems, and parallel the Centronics connector. The only bidirectional communication was logical handshaking which had dedicated conductors in the cable, serial only needed one conductor plus ground for the data and 2 or 3 more conductors if you were even using handshaking. Parallel uses 8 data conductors and about half a dozen logic lines.

The early IBM PC offered an optional serial RS-232 I/O card having a male DB-25 (9 pins is actually more than enough for serial but the DB-9 connectors didn't show up much until you got 2 COM ports on a single card) then once people started using a mouse they were serial DB-9 and built into the mainboard. This was the bidirectional port to communicate with modems and send to printers. Or anything else, the RS-232C standard specifies you must be able to short any of the conductors or connect them to anything within +/- 25VDC without damage, whether the hardware is powered on or not. Not everything meets the full standard.

OTOH, parallel connects directly to the bus and can be very sensitive to incorrect connections or plugging cables while powered. Often damaging motherboard chips for a while there if a stray DB-25 serial modem cable were plugged into the parallel port of a PC. Which might contain jumpers between pins in either or both RS-232 connector hoods to effect self-handshake.

The printer was conceptualized to be the one _peripheral_ that every office was going to surely have or the PC could not function like a typewriter, so the printer has actually always been part of the PC which you connect first before powering them up as one.

Anyway, DOS would only do one thing at a time, so for paperwork you would have to wait for the printer to finish before you could move on. Some printers were slower than others. Fast was not in the vocabulary for early-adopting offices.

Within a couple years at Radio Shack you could get a print spooler to come between the CPU and the printer. An external hardware print spooler of course.

What a time-saver! When you hit PRINT your data went into the spooler much faster than the printer could accept it, within a few seconds you had your command prompt back and the printer could finish the task on its own, however long it took.

Eventually significant buffers came inside the printers themselves, plus Windows became accepted in mainstream offices and it had a software spooler.

With printing handled within Windows at the actual DOS layer for the first decade while Windows was only a shell around whichever DOS you installed it over.

Re:Windows 0day privilege escalation still not fixed by tonyedgecombe on Thursday December 24, 2020 @10:16AM (#25528143)
I remember writing a print spooler for the Apple II. It only worked with RS-2332 because the Centronics interface didn't support interupts.

I don't think parallel ports connected directly to the bus, there was always an interface chip like the Intel 8255.

Re:Windows 0day privilege escalation still not fixed by fuzzfactor on Saturday December 26, 2020 @04:26PM (#25546568)
You're right, just not as well isolated as RS-232.
Re:Windows 0day privilege escalation still not fixed by UweSchmidt on Wednesday December 23, 2020 @07:05PM (#25523764)
How bad could it be? It's about assigning people to the task and if necessary increase the pay. If it's a bigger mess make it a priority and have your best people fix it asap. Printing and security are important.
Re:Windows 0day privilege escalation still not fixed by to11mtm on Wednesday December 23, 2020 @11:25PM (#25525058)
From my knowledge of the horrors of printing and being the 'printer guy' for a Drafting department where we dealt with all kinds of interesting printers...

The scenario I'm theorizing, is that there's probably at least one major vendor who's drivers are dependent on this behavior, and Microsoft is trying to avoid the flack that could result from an update 'breaking usability'. Working around that behavior could be complicated. I feel like if this is the case, I know the vendor.