Your printer is telling everyone its name

October 4, 2026 · Seraf Inc. · 6 min read

Walk into almost any home or office and ask the network a simple question — who are you? — and a surprising number of devices will answer with their full name, model, and what they're running. Not because anyone told them to. Because that's how they were designed.

The protocol doing the talking is called mDNS (multicast DNS), often better known by Apple's name for it, Bonjour. It's the reason your laptop finds your printer without you typing an IP address, why your phone sees the smart TV in the next room, and why AirDrop works. Devices on the local network broadcast little announcements: I'm here, I'm called this, I offer these services.

That convenience has a cost. Every device on the same network can hear those announcements — including devices that shouldn't care, and people who shouldn't be listening.

What your printer is actually saying

A typical mDNS announcement from a network printer includes:

• The service type — _ipp._tcp for printing, _airplay._tcp for AirPlay, _ssh._tcp for SSH, and so on. This tells anyone listening what the device does.
• The instance name — often the device's friendly name. HP-ENVY-5000-series. John's-MacBook-Pro. DESKTOP-A1B2C3D.
• The hostname — the local DNS name, like HP-ENVY-5000.local.
• The port the service is listening on.
• Optional TXT records — free-form key/value data the device adds. Some printers include the exact firmware version. Some laptops include the username.

Put together, that's a lot. An attacker on the same Wi-Fi doesn't need to scan anything — your devices announce themselves. They learn what brand of printer you have (useful for targeting known vulnerabilities in that model), what your laptop is called (often your first name or your company's naming scheme), and which services are open.

Why this matters more than it sounds

Most people picture LAN attacks as something that happens to companies, not to them. But the same exposure shows up in very ordinary places:

• Coffee shop Wi-Fi. Your laptop is announcing itself to everyone in the room. If your device name is your full name, you've just handed it to every other customer.
• Hotel networks. Same, but for days at a time, and often with weaker isolation between guests.
• Your own home. If an attacker gets a foothold on one device — say, a cheap smart plug with a known vulnerability — mDNS tells them where everything else lives.
• Offices. Printers in particular tend to run ancient firmware with known CVEs. An attacker who knows the exact model can go straight to the right exploit.

The information itself isn't secret in any meaningful sense — it's broadcast in cleartext by design. The risk is that it's useful to an attacker and invisible to you.

How to see what your own devices are broadcasting

On a Mac or Linux machine you can listen to mDNS yourself with a single command:

avahi-browse -a -t    # Linux, needs avahi-utils
dns-sd -B _services._dns-sd._udp local.    # macOS

Leave it running for a minute and watch. You'll likely see devices you forgot were on the network, names you didn't choose, and services you didn't know were open.

On Android and Linux, Skopia's Nearby tab does the same thing with a friendlier face. Open a scan, and it lists every device it can see on the Wi-Fi — by name where the device offers one, by IP and MAC where it doesn't — along with open ports and the services they suggest. The names you see in that list are the names everyone else on the network can see too.

What you can actually do about it

You don't have to turn mDNS off everywhere — for most people that would break printing, AirPlay, Chromecast, and a dozen other conveniences. A more realistic approach:

• Rename devices that leak your identity. A laptop called MacBook-Pro leaks less than Sarahs-MacBook-Pro. On macOS: System Settings → General → About. On Windows: Settings → System → About → Rename this PC.
• Turn off services you don't use. If you never print from your phone, the printer doesn't need AirPrint advertised. Most routers and printers let you disable individual discovery protocols in their settings.
• Separate your IoT devices. Many routers support a guest network. Put smart plugs, bulbs, and TVs there. If one is compromised, mDNS on that network only reveals the other gadgets — not your laptop.
• Update firmware. Especially on printers. The mDNS leak matters most when it points an attacker at a known-exploitable model.
• On untrusted networks, use a firewall. Both Android and desktop operating systems can block incoming connections by default on public Wi-Fi. That doesn't stop mDNS announcements, but it limits what an attacker can do with them.

The broader point

Your devices are chattier than you think, and most of that chatter is well-intentioned. But well-intentioned isn't the same as harmless. The network you joined at the coffee shop this morning heard your laptop introduce itself. So did everyone else in the room.

The first step is just knowing what's being said. After that, the fixes are usually small.