Inventory Device Icon Fix

scott-reinlie · 2018-09-18T17:14:47.000Z

Ben.B (Spiceworks):

stephen jabs, were these email notifications?

I also received 4 email notifications.

Ben-B-Spiceworks · 2018-09-18T17:15:47.000Z

Looking into the notification email dups - thanks for the heads up, guys.

niccrockett · 2018-09-18T17:17:16.000Z

I ended up with two devices that had icons using the poop emoji that was moving. The same devices that had that emoji yesterday now show a gif that appears to be a variation of an old Mickey Mouse carton. It’s kind of funny, but at the same time is it secure. After all it’s going out to a third party for these icons and Spiceworks no longer has deals with them, so they could use it to hack into any of our Spiceworks servers. I’m not saying they would, only that it’s possible. I’d suggest every fix this immediately! Ben is there going to be another 7.5 update that includes this fix? FYI, I received the email for this post 4 times all at the same time.

Thanks,
NicCrockett

matthewalley · 2018-09-18T17:39:50.000Z

I was excited for a minute when I thought there was an actual update…

Ben-B-Spiceworks · 2018-09-18T17:46:33.000Z

The script is the quickest way to drop these URLs - we’re still looking at ways to fix them automatically without the script.

We have no indication that there is malicious intent here, on the part of the third-party - likely simply removing older images in the course of their normal business (older laptop models no longer being sold, etc.). As a former partner we don’t expect any funny business (beyond these randomized redirects, if you find them funny).

Again, something we’re still working on and taking seriously. Just don’t want to further the notion that there’s a bad actor here trying to hack everyone’s Desktop installs.

Ben-B-Spiceworks · 2018-09-18T17:49:40.000Z

MatthewAlley:

I was excited for a minute when I thought there was an actual update…

State of Desktop app v8.0 Spiceworks

Hi everyone, we've been working hard on our Inventory products, but have not provided a recent update on the status of the Inventory 8.0 beta or the general future of the Desktop app (Help Desk and Inventory). Below are details around where both are headed, and how it ties into what we're working on for Help Desk and Inventory products. Inventory 8.0 beta The 2017 beta releases of Inventory 8.0 made it apparent that application performance would be a challenge for both Inventory and Help De…

Sorry for the bait and switch! Here’s ^ the latest on Desktop app and the future of Inventory and Help Desk products.

niccrockett · 2018-09-18T18:31:15.000Z

I got a poop emoji on a brand new monitor. I’m not saying the third party is a bad actor. However, if SW is redirecting to them and they’ve discontinued the domain or redirecting it elsewhere, then we really have no idea where these images are coming from nor what’s attached to them. I think it’s great that SW is disclosing this and has released a fix. I’m sorry to put pressure on SW, but to keep your users secure there should have been a fix released when the deal ended with the third party. This way your users would be protected from random URL redirects.

Ben-B-Spiceworks · 2018-09-18T19:21:58.000Z

NicCrockett:

I got a poop emoji on a brand new monitor. I’m not saying the third party is a bad actor. However, if SW is redirecting to them and they’ve discontinued the domain or redirecting it elsewhere, then we really have no idea where these images are coming from nor what’s attached to them. I think it’s great that SW is disclosing this and has released a fix. I’m sorry to put pressure on SW, but to keep your users secure there should have been a fix released when the deal ended with the third party. This way your users would be protected from random URL redirects.

Agree that they should be removed. We should have simply used local copies of the images from the get-go, instead of linking out for them. We got into this a little in the thread:

Switch Icon is Spiceworks Spiceworks Support

I honestly am alright with the ads being off server, but all the actual work stuff should be linked to locally stored icons (or at least stored on Spiceworks.) It’s a little disheartening to see the Helpdesk app linking to other servers that Spiceworks has no control over and doesn’t vett unless poo hits the troll… All jokes aside, this isn’t really good practice stealing other companies bandwidth.

Did you get the emoji showing up for a new device that you just created, after running the script linked here?

squires · 2018-09-18T23:39:43.000Z

I wondered what the heck was going on. I went to retire an old server from inventory and noticed it’s icon was a poo emoji. Rather fitting, since it’s a “crappy” old server, lol. We had a good laugh about it but then realized it could be a major issue. I don’t have time to search for and correct all my icons. Hopefully, there’s an automatic fix soon.

I also got 4 copies of the notification, btw.

bytesnake · 2018-09-19T04:10:09.000Z

The script worked like a charm at my SW.

I also got 4 copies of the notification, btw.

conor1368 · 2018-09-19T05:42:31.000Z

I also got this email notification 4 times. Anyway, thanks for this method for removing Pepe and troll faces from our inventory. Personally (once I realized it wasn’t someone messing with us specifically), I was quite amused by this whole episode.

maximilianvonfrieling2 · 2018-09-19T05:48:49.000Z

Thanks for this script!

conor1368 · 2018-09-19T06:18:55.000Z

Also, not sure if related but I see this post 4 times in ‘my feed’ also (noting that it says it has no comments and no spice-ups)

niccrockett · 2018-09-19T10:34:03.000Z

No, I added it on 9/10/2018. It’s a manually added/managed device that isn’t scanned because it’s a monitor. When I originally added it, the icon was a real monitor icon not the generic one. I noticed the icon change the day before you wrote this post. When it changed in the those 7 days, I don’t know.

I added two of these monitors on the same day. One has the bad icon the other doesn’t. Oddly, neither show the bad icon in the All Devices view of Inventory. I also have other devices showing bad icons, some new and others old, some monitored by SW and others manually managed. Some show the bad icon in the All Devices Inventory list, while others show a generic icon in the list, but if you click on them you’ll see the bad icon.

Ben-B-Spiceworks · 2018-09-19T12:58:18.000Z

NicCrockett, try running the script - it should wipe out the image URLs regardless of the device type, for you. (Or did you already run it?)

lauriedockham6393 · 2018-09-19T16:18:35.000Z

Script took care of it, thank you!

I only receive the email notification twice

dbeato · 2018-09-20T00:40:32.000Z

Any time there are edits to the post it sends an email notification,so that might be reason for this.

niccrockett · 2018-09-20T10:28:23.000Z

dbeato, the issue isn’t an update to the post. Unless Ben is making three changes within milliseconds. Ben’s good, but I don’t think he’s that good, no offense Ben. No, this has been an issue with the blog posts for a long time now. It use to be, we’d receive two emails when a post was first added. Now, apparently it’s been upped to four emails when a post is added. An email might also go out, like you said, when a post is edited. However, all my duplicates are time stamped the same. You might also be referring to if you’ve subscribed to a post you get a notification when a new post is added. In theory this should be one email since you last visited the post. However, at times this has also been broken and I’ve received an email for every post added.

lex0004 · 2018-09-20T12:20:11.000Z

It won’t let me change an image manually.

Will try the script.

Have had this issue of not being able to change the icon manually even before these random icons showed up

Ben-B-Spiceworks · 2018-09-21T15:20:57.000Z

I’ve updated the info in this release notes post - we’ve released the automatic fix, so running the manual script isn’t necessary any longer, unless you want to dump the image URLs immediately.