I have a question about the security of photo printing kiosks.

Question

Level 1

8 points

I have a question about the security of photo printing kiosks.

Specifically, I'd like for anyone who knows more about such things to tell me if I did something very stupid.

This past weekend, I found myself in a situation where I wanted to get a picture from my phone printed very quickly. I had not very many options available to me (it was Sunday, and there were no printing shops open anywhere nearby that I could access the picture via email). I ended up using a Walgreens/Duane Reade photo printing kiosk. I was able to directly connect my phone with a data cable and print the picture from my camera roll.

I was relieved to get the picture, but in retrospect I am very worried that connecting my phone to a public station like that was stupid, and that I might have opened myself up to malware or put my data in jeopardy. Is this something I should be worried about? If so, are there any instant precautions I should take? I welcome any harsh words.

I have an Iphone 5 with the most recent update to IOS7.

Thanks in advance, folks!

iPhone 5, iOS 7.0.2

Posted on Oct 14, 2013 8:14 AM

Reply

Answer 1

Oct 14, 2013 1:01 PM in response to TommyServo

Do you trust the kiosk's owner (Walgreen's I beleive)? I seriously doubt Walgreen's would attempt to hack or other wise damage the phone, your data or otherwise, and the odd's of someone hacking its kiosk is probably very slim. Theoretically it is possible, I suppose, but highly unlikley in this case.

Not sure what answer you are looking for, but you not likely to get a definitive or black'n'white reponse.

Reply

Answer 2

TommyServo Author

Level 1

8 points

Oct 14, 2013 8:31 AM in response to Marc Wilson

Yikes. Thank you for the quick response Marc.

Is there anything in particular I should do right now to mitigate against any potential harm? I read the article you linked, and I'm worried that a phone reset might not fix this if there was something there that could grab my device ID. I imagine all passwords etc., should be changed.

Any advice is much appreciated!

Reply

Answer 3

TommyServo Author

Level 1

8 points

Oct 14, 2013 1:23 PM in response to Kilgore-Trout

Mostly what I was looking for (other than peace of mind) was what might have happened in a worst case scenario. I know that IOS is by nature fairly secure, and I thought that I might find out from others on this board what an attack might target and how I might preemptively deal with it.

I don't think Walgreens would do such a thing either, but at the end of the day it is a public computer that could theoretically be vulnerable. In any event, from what you've said and from other places I've looked, I don't think I need to be worried. Obviously, I'm not going to be doing such a thing again.

Thanks again!

Reply

Answer 4

Oct 14, 2013 8:17 AM in response to TommyServo

I was relieved to get the picture, but in retrospect I am very worried that connecting my phone to a public station like that was stupid, and that I might have opened myself up to malware or put my data in jeopardy.

Yes and yes. There's a reason why iOS 7 asks you if you trust the computer you've just connected it to.

http://www.v3.co.uk/v3-uk/news/2286154/black-hat-researchers-exploit-iphone-flaw s-with-charger-attack

Whether or not anything DID happen, I cannot say.

Reply

Answer 5

TommyServo Author

Level 1

8 points

Oct 14, 2013 9:12 AM in response to TommyServo

I can't seem to edit my response, so I figured I'd reply to clarify that I've read a few technology blogs about "juice jacking" etc. They seem to conclude that while it's certainly possible that something bad could be injected or my information skimmed, it's not something that's widespread or particularly likely to occur. Since I did it at what I would consider a reputable chain, I'd like to think I'm alright.

Again though, I would be very thankful for any further advice or input.

Thank you!

Message was edited by: TommyServo

Reply

Answer 6

Oct 15, 2013 4:58 AM in response to TommyServo

Seriously, you're looking for trouble where none really exists. In the overall array of possible security risks, this is close to the bottom. Using public WiFi and transmitting personal or financial information is far more risky than a dedicated input on a kiosk from a trusted source.

Reply

Answer 7

TommyServo Author

Level 1

8 points

Oct 14, 2013 12:41 PM in response to TommyServo

I know this is a fast forum. I just wanted to bump this one last time in hopes that someone can help me out with a little more information. After that I will look elsewhere.

Thanks again!

Reply