Corporate security in the 3D segment. Part 1.

I am often approached by large companies to help solve the issue of security and threats associated with software. A common reason why data, passwords, important information, data corruption or workflow interruption occurs is due to the digital inexperience of company employees.

If you do not take into account that it is undesirable to use pirated software or download any files from unverified sources, there are still risks that some users do not even know about.

Risks are often associated with 3Ds Max itself, because no one thinks that malicious code can execute in the 3Ds Max environment with the same probability as running a regular *.exe program or opening third-party files.

Script viruses, ransomware plugins that slow down "Custom Attributes", self-executing DLLs and this is not a complete list of what can happen to your 3Ds Max.
All this may affect the workflow in the first place, but also attempts at industrial espionage, undermining work within the company by competitors, or taking over a workstation to create a "Bot-Net" should not be ruled out.

From my experience, I can say that no one cares about the security of 3Ds Max. And this is a huge window of opportunity for hackers. It's simple, not a single computer antivirus reacts and cannot catch such threats, since they are executed in the 3Ds Max environment.

ESET research shows real problems that some companies are facing. It is extremely difficult to map and understand the scale of infections, one can only guess how much the 3D segment has suffered since 2016 and what losses have been inflicted in general.

Loading...

But on average, if you calculate, ordinary script viruses that interrupt and slow down the workflow can take up to 20% of the time for an ordinary employee to find and fix problems.

Some technical information about my virus research under 3Ds Max.

I would like to praise and scold the developers of Autodesk 3Ds Max at the same time. In the 2022 version, a more or less adequate tool for detecting script viruses has been added, and this tool does its job really well. But, it was made as uncomfortable as possible. Is it really not possible for such a large corporation as Autodesk to allocate resources to such an important component and do it at the proper level? Knowing the history of Autodesk 3Ds Max, how they release raw functionality from version to version, it's not surprising that we have such a tool. What's wrong with him, you ask?

A small list of what I don't like about Autodesk Security Tools:

This is a complete mockery of users! No one will make such updates. Namely, updates provide timely security, this is the key to stable operation. Well, how could this be done?

Loading...

These popup messages about viruses or updates are so annoying to users that entire companies are putting up alternative solutions, such as Prune Scene, which can run seamlessly and silently. Prune Scene works very harmoniously with updates, they happen in one second without restarting 3Ds Max. It is so convenient that users are ready to make donations to support the development of this script.

And a few more unpleasant moments with Autodesk Security Tools:

In this way, it seems like Autodesk is for security, but on the other hand, it is done so crookedly that users will simply be exposed to threats due to poor UI / UX. But still, the Autodesk 3Ds Max program itself is convenient and is unlikely to be abandoned in favor of the same Blender. Thanks to a large community, all these shortcomings are corrected. For example, Prune Scene is rid of all these shortcomings, has a minimalistic interface, many virus signatures, fast updates, convenient seamless installation, and most importantly, updates are released as quickly as possible, because users help in the search for new viruses and this reaction is instantaneous. Autodesk, with their bureaucracy, long development, and slow deployment, just can't keep up with the current situation. While the update is in progress, a large number of computers will already be at risk.

Back to corporate security, this is important, this is really important! It is very critical for large companies if a workflow stops or other related problems associated with the leakage of personal data occur. All this can result not only in unplanned cash costs, but even worse, your own reputation is at stake. Therefore, I put on opposite scales Safety and Reputation.

Are you ready to question your reputation? Are you willing to risk your safety?
Give yourself the answer to these questions and maybe don't put it off until tomorrow.

FAQ