On: Attacking UNIX Systems via CUPS

[chupasaurus]

Add every macOS-running device to the picture (who disables cupsd?)...

[sitharus → chupasaurus]

My mac right now running Sonoma 14.6.1, with no system modifications or MDM:

    ≻ ps aux | grep -i cups
    xxxxx    31407   0.0  0.0 410741456   1600 s000  S+    3:18pm   0:00.01 grep --color=auto -i cups

cupsd is not running. If I go to print something cupsd will start up, and after a while of idle it'll shut down again.

[cowsandmilk → chupasaurus]

Generally, CUPS on a Mac is bound to localhost. It is highly atypical for a Mac to make it so any computer on the internet or even local network can make requests to its cups server.

[nullindividual → chupasaurus]

macOS has a firewall on by default.