Cymaera vulnerability forbids installation on work pc

[katriik]

Hello,

Because our work computer are so damn restrictive, I had to request IT authorization to install Everything, and they are denying it based on Cymaera's vulnerability report.

https://cymaera.com/articles/everything.html

Is there any argument I can provide against theirs?

Thank you.

[therube]

The article actually has a link to the nightly build where this was addressed.
Since then, both current release & current beta's should be OK.

viewtopic.php?p=32509#p32509
Also, http://www.voidtools.com/forum/viewtopi ... 716#p32716.

[katriik]

Noted and sharing with IT team.
Painful to have to deal with them.

[NotNull]

Painful to have to deal with them.

I think they are doing a good job when checking out the programs they allow on their network (not even all big companies do that!)
(but annoying for you nevertheless ..)


The 'threat' is a lot less severe than it sounds:
When you intsall Everything in "C:\Program Files", you need elevated admin rights to put a file (urlmon.dll) in that folder [1].
And when some hacker is already an admin, he can do "everything" and then access to Everything is the least of your (IT's) problems.

And if said hacker is able to take control of Everything, he/she can only list the files on your system.
There are a lot of ways to list all the files on your system; even without admin rights. (but none of them as fast as Everything, of course )


If that is not enough to convince your IT department, there is also the Lite version of Everything.
In this version all possible attack vectors are removed (by removing some functionality, that you probably don't need in your situation)

[1] In case you are still running an older version (1.4.1.989 or below) of Everything

Good luck! (and don't be too hard on your IT department; they are doing a good job - at least in this case )

[katriik]

Thanks @NotNull,

Appreciate your reply.
They are nice guy. The team is not bad. It's the policies that are sometimes just too harsh and forbids us to become more efficient at our daily tasks.

At my past job, Everything was just the heaven's angel we were looking for. When a colleague presented me this tool, it saved us so much wasted time.

The concern now is that we're using SharePoint as our file server. Because the files on demand is active, Everything helps us to find the files we need.
They may be concerned because of this, I guess.

Anyway, I've shared the first comment and hope they allow its installation.

Have a great day.

[NotNull]

we're using SharePoint as our file server.

Then I *definitely* wish you good luck!