Seeing someone else's printer

[crebel]

So I just went on to check a print when I wasn't home and noticed the live camera feed wasn't showing my printer. I thought it was just a generic screen because it wasn't connected, but I toggled the LED and it turned off and on, so I'm definitely controlling someone else's printer.

I'm home now and connecting to Wi-Fi does work and my printer shows up, but disconnecting Wi-Fi makes it go back to this same random printer.

[Grant Harkness]

Hi everyone,

Thanks for helping test K2 Companion. I want to be straight with you about a
security issue we found and fixed today.

WHAT HAPPENED
Under certain conditions the remote access service could connect a phone to the
wrong printer. It only affected printers of the same model connecting remotely
(off your home Wi-Fi) through our relay. In that situation one tester's app could
view and control another tester's printer. Connections on your own home network
were never affected, and this never involved any personal or account data,
because the app does not use accounts or logins.

WHAT CAUSED IT
When you set up remote access, our server identified your printer partly by its
model code. Every K2 of the same model reports the same code, so a second printer
of that model could be matched to the first one already set up. That was our
mistake, not anything you did.

WHAT WE HAVE DONE
1. Fixed the matching so every printer is now given its own unique, private
   remote identity.
2. As a precaution, reset all remote connections and rotated every access
   credential on the server.
3. Your printer itself was not changed in any way. Local access on your home
   network is unaffected.

WHAT YOU NEED TO DO
Please reconnect remote access. It takes about a minute:
1. Put your phone on the same home Wi-Fi as your printer.
2. Open K2 Companion and tap "Set up remote access".
Your printer will be given its own private remote link.

I take this seriously and I am sorry for the lapse. If you have any questions, or
noticed anything unusual while testing, just reply to this email and I will come
straight back to you.

Thanks,
Grant
Hark Tech