Urgent - Windows NetFramework LB Security Issue

ladybug-tools
,
1

Hi @chris @mostapha We have been using on my teams’ computers (6 computers) LB1.8 tools up to the latest single click installer available on the website for several months, upgrading our scripts and testing it with no issues.

We are trying to push it to our firms’ computers, and are running into an issue with Rhino 8 and LB1.8; LB1.8 will not run in Rhino 8 due to a framework issue, see below:
image
image

Our IT figured out that if they ran R8 in compatibility mode, LB loaded fine. We obviously cannot run Rhino in compatibility mode every time, since it breaks all the other plugins.

Our IT told us that we have been able to run it on our own team computers because either Rhino, or the LB installer auto-installs this Windows Framework application:

image
image968×48 5.96 KB

This program is auto-deleted by our IT on all other laptops (and will be on ours soon too now that they figured this out) because it presents a security issue to the firm, and therefore, is not allowed.

We are transitioning from R7 to R8 on our firms’ machines, and phasing out R7, as well as LB Legacy versions - so we need to figure out how to get LB working on our machines with this limitation of not being able to use the Windows runtime 7.0 as shown above.

Pls lmk if this is possible, if there is a workaround, or if we cannot use the single click installer but instead need to install LB the old way with the GH script, and install all the dependencies separately. If we need to hop on a call or if email is easier, pls feel free to email me rmermelstein@kpf.com

Tagging @jackD so he can follow.

Thanks Chris, Mostapha

2

Hi @remyweather, thank you for documenting this. Unless I’m missing something this is a compatibility issue and not a security issue.

I suspect you’re testing this on a computer that has both Rhino 7 and Rhino 8. Rhino 8 by default tries to load the one from Rhino 7 which is incompatible with Rhino 8, and that’s why you get the error message that you get.

The solution is to install it only for Rhino 8 once. See here for a longer explanation:

3

Hi Mostapha,

We will try this; thanks. If I remove the Windows 7xxx runtime thing pasted above though, then LB in R8 does not work. That leads me to believe that you need the windows 7xxx runtime installed for it to work. This is the component that my IT says will not work with our companies Security protocols.

4

Hi @remyweather, thank you. I’m not sure about the Windows 7xxx runtime issue. Let me send an email and include @MingboPeng and we can discuss this further. I need to better understand the exact issue with the file and why it doesn’t comply with the protocols. This is the first time that we’re made aware of this issue.