Cross Site Printing

balaji
By balaji

June 10, 2008

What is Cross Site Printing?

  1. A typo for Cross Site Scripting
  2. A new Printing technology from Microsoft
  3. A new attack that prints to your internal printers when you visit a website
  4. None of these

Answer: C. A new attack that prints to your internal printers when you visit a website

Cross Site Printing is an amusing attack first written about by Aaron Weaver in November 2007. In this attack, when a victim visits a malicious website, the site sends specially created javascript program that print messages to the victim's internal printers. These could be simple text messages, or more complex (and better formatted) postscript messages. The attack works only if the browser allows the running of javascript from the malicious site. For Firefox users, the "noscript " plugin is a powerful defense against this attack. IE does not allow selectively blocking javascripts yet, so a simple solution is not available for IE.


Tags: Quiz

About

balaji