canon

52 Articles

The printer's display with the exploit-loaded animation playing, saying "hacked by blasty" and a bunch more stuff

A Fun Exploit For Canon Printers Brings GDB Gifts

April 4, 2024 by 12 Comments

Modern printers make it all that much more tempting to try and hack them — the hardware generally tends to be decent, but the firmware appears to be designed to squeeze as much money out of you as possible while keeping your annoyance level consistently high. That’s why it’s nice to see this exploit of the Canon imageCLASS MF74XCdw series (MF742Cdw/MF743Cdw) by [blasty], triggerable over a network connection, with a story for our amusement.

In this post, we get a tale of how this hack came out of a Pwn2Own Toronto challenge, notes on the hardware involved, and we’re shown the journey to a successful hack. The Canon printer OS is built without many of the protections, which makes playing with it easier than with more modernized targets, but it’s nevertheless not straightforward. Still, exploiting a couple things like the SOAP XML implementation and the UTF8 encoder nets you an ability to play nice animations on the display, and most certainly, control over the entirety of the hardware if you wanted it.

One of the most fun things about this hack is the GDB stub recently included in the repo. If you wanted to debug Canon printers for fun or profit, [blasty] brings you a GDB stub to do that comfortably, with a respectable README that even has porting notes for other Canon ImageCLASS printer models, should you lay your hands on a different machine of despair. WiFi connectivity appears to be enough for this hack, so you better make sure you don’t have your network-connected printers exposed on the Internet — not that you needed more reasons to avoid that.

Hackaday Links Column Banner

Hackaday Links: August 6, 2023

August 6, 2023 by 22 Comments

“Have you tried turning it off and on again?” is a common tech support maneuver that everyone already seems to know and apply to just about all the wonky tech in their life. But would you tell someone to apply it to a reservoir? Someone did, and with disastrous results, at least according to a report on the lead-up to the collapse of a reservoir in the city of Lewiston, Idaho — just across the Snake River from Clarkston, Washington; get it? According to the report, operators at the reservoir had an issue crop up that required a contractor to log into the SCADA (supervisory control and data acquisition) system running the reservoir. The contractor’s quick log-in resulted in him issuing instructions to local staff to unplug the network cable on the SCADA controller and plug it back in. Somehow, that caused a variable in the SCADA system — the one storing the level of water in the reservoir — to get stuck at the current value. This made it appear that the water level was too low, which lead the SCADA system to keep adding water to the reservoir, which eventually collapsed.

Continue reading “Hackaday Links: August 6, 2023” →

Converting A Sigma Lens To Canon, Digital Functionality Included

July 1, 2022 by 8 Comments

These days, camera lenses aren’t just simple bits of glass in sliding metal or plastic housings. They’ve often got a whole bunch of electronics built in as well. [Dan K] had just such a lens from Sigma, but wanted to get it working fully with a camera using the Canon EF lens fitting. Hacking ensued.

The lens in question was a Sigma 15-30mm f/3.5-4.5 EX DG, built to work with a Sigma camera using the SA mount. As it turns out, the SA mount is actually based on the Canon EF mount, using the same communications methods and having a similar contact block. However, it uses a mechanically different mounting bayonet, making the two incompatible.

[Dan] sourced a damaged EF lens to provide its mount, and modified it on a lathe to suit the Sigma lens. A short length of ribbon cable was then used to connect the lens’s PCB to the EF mount’s contacts. When carefully put back together, the lens worked perfectly, with functional auto-focus and all.

It goes to show that a little research can reveal possibilities for hacking that we might otherwise have missed. [Dan] was able to get his lens up and running on a new camera, and has taken many wonderful pictures with it since.

We’ve seen some great lens hacks over the years, from 3D printed adapters to anamorphic adapters that create beautiful results. If you’ve got your own mad camera hacks brewing up, drop us a line!

Hackaday Links Column Banner

Hackaday Links: April 17, 2022

April 17, 2022 by 26 Comments

There are plenty of stories floating around about the war in Ukraine, and it can be difficult to sort out which ones are fact-based, and which are fabrications. Stories about the technology of the war seem to be a little easier to judge, and so stories about an inside look at a purported Russian drone reveal a lot of interesting technical details. The fixed-wing UAV, reported to be a Russian-made “Orlan,” looks quite the worse for wear as it’s given a good teardown by someone wearing Ukraine military fatigues. In fact, it looks downright homemade, with a fuel tank made from what looks like an old water bottle, liberal use of duct tape to hold things together, and plenty of hot glue sprinkled around — field-expedient repairs, perhaps? The big find, though, is that the surveillance drone carried a rather commonplace — and cheap — Canon EOS Rebel camera. What’s more, the camera is nestled into a 3D printed cradle, strapped in with some hook-and-loop tape, and its controls are staked in place with globs of glue. It’s an interesting collection of hardware for a vehicle said to cost the Russian military something like $100,000 to field. The video below shows a teardown of a different Orlan with similar results, plus a lot of dunking on the Russians by a cheery bunch of Ukrainians.

Continue reading “Hackaday Links: April 17, 2022” →

Canon Temporarily Abandons Smart Ink Cartridges

January 13, 2022 by 49 Comments

An unexpected side effect of the global semiconductor shortage came to light this week — Japanese printer manufacturer Canon announced they are temporarily going to provide consumable ink and toner cartridges without microchips. Furthermore, they provided instructions for consumers on how to bypass the printer’s logic, allowing it to function even when it incorrectly thinks the ink or toner is low. Included in the announcement (German), the company stated what most people already knew:

There is no negative impact on print quality when using consumables without electronic components.

It’s well known that many printer companies make their profit on the consumable cartridges rather than the printers themselves. And most printers require consumers to only use factory original cartridges, a policy enforced by embedded security ICs. Use a third-party ink cartridge and your printer will likely refuse to print. There are legitimate concerns about poor quality inks damaging the print heads. But with reports like this 2003 one from the BBC noting that 17% to 38% additional good quality pages can be printed after the consumable is declared “empty”, and that the price per milliliter of inks is seven times the cost of vintage champagne, one can reasonably conclude that these DRM-protected consumables are more about on ensuring profits than protecting the hardware.

For now, this announcement applies to German customers, and covers the Canon imageRunner family of multi-function printers (the complete list is in the company announcement above).

Game Boy Camera Gets Ridiculously Good Lens

December 19, 2021 by 26 Comments

How do you get better pictures from a 20+ year old Game Boy Camera? How about marrying a DSLR lens to it? That’s what [ConorSev] did and, honestly, the results are better than you might expect as [John Aldred] mentioned in his post about the topic. You can check the camera out in the video below.

A 3D printed adapter lets you mount a Canon EF lens to the Game Boy Camera, a trick that we’ve seen in the past. [ConorSev] looked at the existing adapters floating around, and came up with the revised version you see here. There was still the problem of actually getting the images off the Camera cartridge, but luckily, this isn’t exactly unexplored territory either.

While there might not be anything new with this project, using a high-quality lens on the toy makes for some interesting photographs, and you wonder how far you can push this whole idea. Of course, no matter how much of a lens you put on the front, you still have to contend with the original image sensor which has hardly well. Still, we were impressed at how much better things looked with a high-quality zoom lens.

We bet the original designer of the Game Boy Camera never imagined it would have the kind of zoom capability you can see in the video. We love seeing these little handhelds pushed beyond their limits. Cryptomining? No problem. Morse code? Piece of cake.

Continue reading “Game Boy Camera Gets Ridiculously Good Lens” →

Proprietary Lenses Are No Problem With This USB Adaptor

October 24, 2020 by 11 Comments

There was a time when a camera lens was simply a set of shaped pieces of glass in a tube, with a mount and an aperture. But as cameras have embraced electronics ever more, technology has found its way past the lens mount to the extent that all features of a modern lens are electronically controllable. Can they be used outside the confines of the camera they were designed for? If the user is [Jana Marie] then certainly, because she’s created a nifty USB adapter and mount for Canon lenses for use with her custom streaming camera.

The hardware is a 3D printed lens mount with a PCB that mates with the pins on the lens. An STM32 does the hard work and talks to the outside world through a USB interface, however it’s in the software that the real effort lies. The Canon lens protocol has been extended since the 1980s, and the commands for different generations of lenses can be convoluted. All the information is in a GitHub repository, so the curious hacker can roll their own.

There are a wealth of camera projects to be found for those that don’t mind tearing apart some of their more valuable possessions, and this isn’t the first we’ve seen involving the hacking of the Canon protocol.