Lynn Allen's Blog

Get to the right Plan view in AutoCAD every time!

For those of you who work in 3D (which is probably less than half of you) - you know how the PLAN command loves to do a ZOOM Extents when switching to the PLAN view. Super annoying.  Often I just want the PLAN view of my current display without the extraneous extra step of zooming back in - that's where EXPLAN comes into play.

Check out my Cadalyst video and learn how easy it is to use EXPLAN!

 Why do I always look less than glamorous when it is still?  Geez... (but enjoy!)

AutoCAD Hacked! - Part 2

Well, I don't want to keep you in suspense any longer than necessary. As Lynn is returning from her vacation, rested and rejuvenated, I'd like to finish up my guest posts on AutoCAD security. Again, my appreciation and thanks go to Lynn for the opportunity. - Dieter Schlaepfer

---------------------------------

The war for your privacy, identity, intellectual property, and online security is definitely escalating! The most common and easiest method that cyber-criminals use is to fool people into clicking a link or opening an attachment in email. Some of these can be very convincing that they're legitimate.

However, certain cyber-criminals and organizations focus on your AutoCAD environment. Your first line of defense is to be aware of their methods and know what features and best practices can help you defeat these attacks.

 

Here’s what our software and test engineers did for AutoCAD 2016:

• Analyzed the code and reduced or eliminated vulnerabilities to malformed data.
• Updated the CAD Manager Control utility so that several system variables can be locked (LEGACYCODESEARCH, SECURELOAD, and TRUSTEDPATHS).
• Provided a way to prevent the common vulnerability that allowed AutoLISP and other executable code from being automatically loaded from the Start In folder. (LEGACYCODESEARCH)
• Improved the accessibility to trusted paths and other security settings through an upgraded Security Options dialog box. When you restrict the folders from which executable code can run, it’s less likely that malicious code can execute secretly.
• Added support for attaching digital signatures to AutoLISP and related files. Adding a digital signature to an application provides you with a way of verifying whether the application has been replaced or modified. Any changes will invalidate the digital signature, and will alert you when you try to use it.
• Updated a variety of other vulnerabilities. With genuine, non-cracked products, you remain current with Autodesk’s countermeasures against cyber-crime.
• Removed the ability to add passwords to drawing files. Instead, we recommend that you purchase an encryption product that meets current industry standards and is updated as needed. As of April 2015, many security experts recommend a 2048-bit RSA asymmetric key length as a minimum (a 4096-bit key length for internet transactions) along with a 128-bit AES symmetric key length as a minimum (a 256-bit key length for classified information).

Even if you don’t have AutoCAD 2016 yet, you can still be aware of the growing security threats and take precautionary measures. Don't put it off!

Like you, I truly wish that these threats would go away, but we need to accept the fact that they will continue to escalate as will our efforts to combat them.

 

AutoCAD Hacked! - Part 1

While Lynn’s away on a well-deserved vacation, I’m going to sneak in with a couple of guest posts. This is an important subject and I’m delighted that Lynn’s given me the opportunity to share this information with you!  - Dieter Schlaepfer

------------------------

It seems like every week there's another business devastated by an online intrusion, theft, or fraud. New and more sophisticated exploits are being reported with increasing frequency. We all try to protect ourselves against identity theft and make sure not to click on any suspicious emails, but what about your drawing files? 

 

Sometimes the bear doesn't chase the slowest person!

As a member of the AutoCAD Security feature team, I’d like to share with you some of the things that I’ve learned over this past year. My goal is not to scare you, although there are scary things happening, but to raise your awareness and preparedness.

Autodesk and independent security experts have become aware of increased security threats to your privacy and intellectual property. For example

• An architectural firm discovered that an unauthorized program was automatically emailing their AutoCAD drawing files to a foreign account overseas.
• A book published a few months ago describes how a sophisticated virus was used for espionage at a secure facility. AutoCAD drawing files were accessed in the attack.

Private individuals, competitors, government agencies, and well-funded mercenary organizations (yes, they exist) have various motivations including the following:

• To disrupt your business
• To steal and sell your designs
• To acquire your in-process patent drawings
• To monitor your progress on your projects for competitive or stock price advantages
• To acquire information for purposes of extortion, espionage, or terrorism

Okay, so how do they break in?

 

In addition to the usual risks of clicking links within emails and network security attacks, attacks that are related to AutoCAD can use one of these methods:

• AutoLISP and a variety of other executable files can be altered to contain malware. Typically, these files are included in a ZIP file along with drawing files and can start automatically.
• An application, utility, or customization file downloaded from an untrusted website can contain malware. Even a trusted application can be quietly replaced with a modified version.
• Many users download illegal "cracked" software, not realizing that anyone capable of cracking licenses is also capable of inserting code that can quietly do anything, including logging their keystrokes.
• Drawing files can be altered to try to overflow memory with executable code. Drawing files can also contain VBA macros that can execute if you have VBA installed.

Next time, we’ll take a look at what you can do to protect yourself. See you then!