Lies, damned lies and scans
summary
Xerox workcenters run a JBIG2 pattern-matching compressor that sometimes replaces digits at the pixel level, producing perfectly laid-out but wrong numbers; errors trace back to code present since 2006 and reproduce reliably with supplied test pages. Hundreds of thousands of devices across multiple models and factory defaults are implicated, patches roll out slowly, and scanned archives or court exhibits lose legal value. Evidence includes video reproductions and numbers duplicate pixel-for-pixel across scans.
AI-written summary · about
chapters (27)
- 0:00Intro
- 1:432008: Tinfoil hat theories on Barack Obama's nationality
- 3:322011: Publication of ,,Long Form Birth Certificate
- 4:052011: Indications of LFBC forgery
- 7:38July 24th, 2013: Construction plan scan
- 10:05July 24th, 2013: Cost register
- 11:12July 24th, 2013: Some self-generated test numbers
- 12:24Trusting support is making sure you'll die alone
- 13:54st: Blog post online
- 14:35nd and 3rd: First mentions in tech blogs
- 16:29th: Mass Media kicking in
- 20:44Compression test image segments
- 21:03Compression: GIF
- 21:27Compression: Low quality JPEG
- 22:39Compression: JBig2
- 26:53th, morning
- 28:51August 6th, afternoon
- 34:01th: Internet fun
- 36:39th: Xerox announces software patch
- 36:57The laugh is for free...
- 42:33August 9th: Switched numbers on factory settings
- 43:42Aug 12th: Bug confirmation
- 44:07Aug 22th: Patch release
- 46:34Bonus "Lesson learned"
- 48:05All other ,,lessons learned
- 48:19Epilogue - March 2015: BSI ,,bans JBig2
- 49:30Epilogue - Barack Obama's nationality
related talks
22mThe Glitching Hour
01h 01mPeople that make computers go crazy
35mEnhancing Software Composition Analysis Resilience Against Container Image Obfuscation
45mBits From The Matrix: Optical ROM Extraction
48mWeird Machines: Exploiting Turing-Completeness
45mPrinter Hacking Adventures
24mRed Team Vs. Blue Team
10mUsing font shaping to put commas in big numbers EVERYWHERE!!