1

Many Inventory users are affected by an issue where device icon image URLs are redirecting to unrelated images (emoji and meme images).

The Inventory application uses a lookup API to locate a device icon image whenever a device is scanned and created in the Inventory. This lookup stores an image URL for the device icon image locally in the Desktop app database, and under normal circumstances the URL is not updated later.

Some of the image URLs point to a third-party (previously a partner company), and the URLs are no longer valid. Currently the invalid URLs are redirecting to display unrelated images in place of device icons.

The unrelated images are distracting and do not belong in the Inventory app, so we’re working on methods that would automatically prevent them from being displayed.

We have released a cache wipe to automatically wipe the image URLs, and also provided two methods for manually removing the URLs from devices to remove the unrelated images, including a simple method for individual devices, or a “global” method to hit all of your devices at once.

UPDATE (9/21): The “automatic” section below was added. Edited the above the reflect this update.

Resolutions### Automatic

We’ve released an image URL cache wipe that will resolve this for everyone automatically, without any interaction on your part. Typically it will take up to 24 hours to dump the cache, but you can also restart Spiceworks and wait 5-10 minutes. It is also safe to use the manual script (below), but at this point it should no longer be necessary.

Manual

Option 1 (edit individual devices)

If you only have a few devices that are affected you can force a device to reset the image URL, removing the bad URL.

To do this, view the device in Inventory and edit the details. Make any change to the Model or Manufacturer fields (make note of the correct value, as you can change it back) and save the device record. This resets the image URL, and should revert the icon to a default icon. Now, you can edit again and revert the change you made if needed.

Option 2 (globally remove bad URLs)

This option involves some downtime and is riskier (because editing the database directly is inherently risky). Typically the downtime will be a few minutes, long enough for the app to restart.

Overview: Create a backup, run a script, and then launch the app.

Step by step instructions below:

  1. Go to Settings > Global Settings > Backup Configuration, click Backup Now

  2. Confirm a good .zip backup is created in your backup folder (typically C:\Program Files (x86)\Spiceworks\backup) after a few minutes by opening the zip file to make sure the process was completed

  3. Download: https://community.spiceworks.com/scripts/show/4426-device-inventory-icon-fix

  4. Rename the file to sqlfix.rb

  5. Copy sqlfix.rb into C:\Program Files (x86)\Spiceworks\bin

  6. Open a command prompt (cmd.exe) as administrator and run

    C:\Program Files (x86)\Spiceworks\bin\ruby "sqlfix.rb"

  7. The app will be stopped, a backup will be made of the db and the fixes will be applied

  8. Once the command window prompts, you can press a key to exit it and then restart Spiceworks. Typically this should take only a few seconds to complete

  9. Startup Spiceworks

29 Spice ups
2

So what is wrong with more memes?

4 Spice ups
3

I dunno. I got a chuckle when I logged in and saw a few memes giving me a big ol’ grin. But that’s just me.

2 Spice ups
4

Now if you could solve why I got 4 (so far) notifications about the blog post…

13 Spice ups
5

stephen jabs, were these email notifications?

1 Spice up
6

I also got 4 email notifications about this post, and do not recall subscribing or showing other interest in this thread.

4 Spice ups
7

I received four as well.

Yes. SW-Four_Notifications.jpg

2 Spice ups
8

I also received 4 email notifications.

5 Spice ups
9

Looking into the notification email dups - thanks for the heads up, guys.

1 Spice up
10

I ended up with two devices that had icons using the poop emoji that was moving. The same devices that had that emoji yesterday now show a gif that appears to be a variation of an old Mickey Mouse carton. It’s kind of funny, but at the same time is it secure. After all it’s going out to a third party for these icons and Spiceworks no longer has deals with them, so they could use it to hack into any of our Spiceworks servers. I’m not saying they would, only that it’s possible. I’d suggest every fix this immediately! Ben is there going to be another 7.5 update that includes this fix? FYI, I received the email for this post 4 times all at the same time.

Thanks,
NicCrockett

2 Spice ups
11

I was excited for a minute when I thought there was an actual update… :frowning:

6 Spice ups
12

The script is the quickest way to drop these URLs - we’re still looking at ways to fix them automatically without the script.

We have no indication that there is malicious intent here, on the part of the third-party - likely simply removing older images in the course of their normal business (older laptop models no longer being sold, etc.). As a former partner we don’t expect any funny business (beyond these randomized redirects, if you find them funny).

Again, something we’re still working on and taking seriously. Just don’t want to further the notion that there’s a bad actor here trying to hack everyone’s Desktop installs.

13

Sorry for the bait and switch! Here’s ^ the latest on Desktop app and the future of Inventory and Help Desk products.

2 Spice ups
14

I got a poop emoji on a brand new monitor. I’m not saying the third party is a bad actor. However, if SW is redirecting to them and they’ve discontinued the domain or redirecting it elsewhere, then we really have no idea where these images are coming from nor what’s attached to them. I think it’s great that SW is disclosing this and has released a fix. I’m sorry to put pressure on SW, but to keep your users secure there should have been a fix released when the deal ended with the third party. This way your users would be protected from random URL redirects.

Spiceworks___Open_Tickets.png

1 Spice up
15

Agree that they should be removed. We should have simply used local copies of the images from the get-go, instead of linking out for them. We got into this a little in the thread:

Did you get the emoji showing up for a new device that you just created, after running the script linked here?

1 Spice up
16

I wondered what the heck was going on. I went to retire an old server from inventory and noticed it’s icon was a poo emoji. Rather fitting, since it’s a “crappy” old server, lol. We had a good laugh about it but then realized it could be a major issue. I don’t have time to search for and correct all my icons. Hopefully, there’s an automatic fix soon.

I also got 4 copies of the notification, btw.

17

The script worked like a charm at my SW.

I also got 4 copies of the notification, btw.

18

I also got this email notification 4 times. Anyway, thanks for this method for removing Pepe and troll faces from our inventory. Personally (once I realized it wasn’t someone messing with us specifically), I was quite amused by this whole episode.

19

Thanks for this script!

20

Also, not sure if related but I see this post 4 times in ‘my feed’ also (noting that it says it has no comments and no spice-ups)

1 Spice up