Cyber Risks · Krebs on Security

Did the Clinton Email Server Have an Internet-Based Printer?

Summary: Historic domain registration records reviewed by Farsight Security show that among the Internet addresses once assigned to clintonemail.com was 24.187.234.188, whose subdomain was printer.clintonemail.com, first noticed by Farsight in March 2015. Security researcher Ronald Guilmette said documents sent to an Internet-connected printer set up this way could have been sniffed by other customers of the same ISP, and noted it is unclear whether a printer was ever actually connected.

Bottom line: Guilmette's point is that confidential documents could have been obtained without breaking into anything - a printer reachable at a public address turns every print job into traffic on the open Internet, and the historical records also list sslvpn.clintonemail.com alongside the mail and printer subdomains.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related