Received an order, with the request printing with their software

[OLCE]

Hi,

did anyone else receive an order via 3DHubs, with the request to print it with their software?

(= they ask to upload the stl to a website with your email address, and you’ll receive a mail with the application & code)

seems weird or suspicious to me.

O.

[wirlybird]

Doesn’t sound good to me.

[brianh014]

Sounds fishy. If you are uncomfortable with that I would cancel the order.

[keebie81]

Did they pay? Maybe they want to see how their software works

[Perry_1]

I would do this, what do you have to lose.

What is the website?

[OLCE]

That is what they told me, BUT, would you install a piece of software on one of you production machines, without any information about the software?

I’ve asked for details, did not get any further info.

[OLCE]

What I have to loose : my production PC’s, any info on my network, …

would you install a piece of software on one of you production machines, without any information about the software? (and not getting more info when asked)

Sadly, I don’t have time to create an isolated vm and analyse the sofware these days

(P.S. I work in the IT industry, network & security, I know how destructive a piece of software of only 10KB and 5 seconds of time)

[3DFlying]

I would turn and run at 1000mm/s

[wirlybird]

What do you have to lose? Everything. You’d have to be crazy to go through with this without a lot of research.

I also was in IT Network and security. This is screaming danger all over it.

[wirlybird]

Sorry but that doesn’t fly. If you are a programmer/software developer you have the means to test or you wouldn’t know if even your basic code is any good.

If you wanted to beta test with the public, which is unlikely, you would set up an environment for people to go to and be able to get your software but only after they meet certain criteria.and are approved.

[Perry_1]

WAIT, you posted that they asked you to upload the STL to their website. The responses here are suggesting that you were asked to install software on your computer.

These are different of course!

[wirlybird]

You better re-read what he said.

" they ask to upload the stl to a website with your email address, and you’ll receive a mail with the application & code".

They want to upload a STL to a website and presumably using his email and then he will get an email with “software” and the code. It is implied he would have to load the software to make the print and the code could be access to the STL or the software or worse, the email itself can easily be malicious.

How is he going to get the STL to upload if they don’t upload it to HUBS which it sounds like they are trying to circumvent? Why would they send it to him just to ask him to upload it to some website? Make no sense when they could do it themselves.

An email with software and code specifically implies you will download and install something and the code to run it or to actually download the STL they upload.

[Perry_1]

OH. I stand corrected. I did not understand the request.

Sorry I misread the original post!

I would also run from this, without better info.

[wirlybird]

It’s a hard one to interpret! From the perspective of someone who has been in IT and security I am always suspicious!! I keep telling friends “Delta is not giving away tickets on Facebook so stop liking and sharing” unless you want your account hacked!!

More info would be good. If they truly have new software I am sure they would have no shortage of volunteers to test it!

[federico3]

Hi guys,

Thanks for flagging the problem. We are aware of the customer’s activity on the platform and we’re monitoring it. Right now, we don’t have any reason to block his account since he’s paying for all the orders and no one had a security problem with his software. In any case, considering the strange nature of the request, you can simply decline the order if you don’t feel comfortable with the procedure.

@micodvr it may be a good idea to share some extra information about your project also here, so the Hubs won’t be scared by your orders!

Let me know if you have any further question.

Federico - 3D Hubs

[micodvr]

Hi guys,

We are a startup company in Amsterdam and we’re doing a beta testing of our application. The application simply works as a slicing software, but you don’t have to do the settings. You upload the file on our website, you will then receive an email with the application and Print ID, download the application for Windows or Mac, enter the Print ID on the application, printer will automatically connect to the application and the application will do the rest of the job. We pay for the testing service and feel free to use it as long as you like. You can also visit us here at the office if you want to.

Thank you,
Greg

[federico3]

Thanks for your fast reply Greg!

[micodvr]

Hello Federico,

Thank you for mentioning my account, I was not aware. And thank you for this opportunity so we can explain or share more about our project.

Regards,
Greg

[Perry_1]

What is really weird is that no-one else has received such a request.

[OLCE]

Greg,

Thanks for replying

so if I understand correctly, the steps are :

1) we upload the STL to your website

2) the slicing is done on … your servers?

3) we get an email with the app and and ID

4) we need to install the app and run it (or just run it without installation ?) and enter the ID into the app

(Will it also run on Linux?)

5) your app will then … ? I assume:

- connect to your server to download the gcode (or code to control the printer)

- connect to the printer, and send the code to the printer?

- so it needs direct access to the printer (via USB), not via wireless, or uploading the code via sdcard

6) Will it send feedback on the job also back to your servers?

(this and more detail is the type of information we are looking for, maybe a clear explanation on a webpage of your website…)

I don’t want to be the bad guy, I hope you can understand that a request like “please install our software” without much info on what the software would/should do, generates a lot of suspicion. We need some minimum information in order to consider installing unknown software.

Just some advice :

It would help your beta testing a lot, if you provide the typical info of a beta testing program (technical details, about the platform, the intentions, …I can understand a level of secrecy, if you don’t want the general public to know yet, but then you can put the info on a secured part of your site)

O.