Path contained within .blend is may be too verbose #45546

New Issue

Hideki Saito · 2015-07-24T04:34:55+02:00

Hideki Saito commented

2015-07-24 04:34:55 +02:00

System Information
Linux (Intel graphics)
The nature of the bug is independent of the issue reporting.

Blender Version
Tested on 2.75

Exact steps for others to reproduce the error

Open blender
Save the file (default cube is fine)
Run "strings" on the resulting .blend file.
Notice it shows full path to the .blend file and also paths from histories.

Implications
The implication of this issue is that this may pose privacy concerns in some cases when .blend file is distributed.
Perhaps, it is not so much of concerns in general usage, but could be an issue if the particular .blend file is output from production machines in a company, which can leak sensitive project names and other information.

Suggestion
Perhaps there is usefulness in retaining histories within the .blend file, however, it might be great to have an setting that inhibits inclusion of private information, as well as an option on the save dialog to strip such information.

**System Information** Linux (Intel graphics) The nature of the bug is independent of the issue reporting. **Blender Version** Tested on 2.75 **Exact steps for others to reproduce the error** 1. Open blender 2. Save the file (default cube is fine) 3. Run "strings" on the resulting .blend file. 4. Notice it shows full path to the .blend file and also paths from histories. **Implications** The implication of this issue is that this may pose privacy concerns in some cases when .blend file is distributed. Perhaps, it is not so much of concerns in general usage, but could be an issue if the particular .blend file is output from production machines in a company, which can leak sensitive project names and other information. **Suggestion** Perhaps there is usefulness in retaining histories within the .blend file, however, it might be great to have an setting that inhibits inclusion of private information, as well as an option on the save dialog to strip such information.

Hideki Saito commented

2015-07-24 04:34:55 +02:00

Changed status to: 'Open'

Hideki Saito commented

2015-07-24 04:34:55 +02:00

Added subscriber: @HidekiSaito

blender-admin commented

2015-07-24 04:34:55 +02:00

#102161 was marked as duplicate of this issue

Hideki Saito commented

2015-07-24 04:38:24 +02:00

Please note, I did not do a comprehensive analysis of strings in the file. (There are a lot of strings included in a file.) But I felt this one's least expected.

Campbell Barton commented

2015-07-27 03:54:13 +02:00

Added subscriber: @ideasman42

Campbell Barton commented

2015-07-27 03:54:13 +02:00

Changed status from 'Open' to: 'Archived'

Campbell Barton closed this issue

2015-07-27 03:54:13 +02:00

Campbell Barton self-assigned this 2015-07-27 03:54:13 +02:00

Campbell Barton commented

2015-07-27 03:54:13 +02:00

The Blend file writes Blender structures as they're stored in memory,
So even if this one issue were resolved - there are many places where setting a relative path for example - will leave part of the absolute path after the trailing null terminator - for example.

If this were as simple as changing file writing in a few places, it may be worth resolving.
But I'm afraid this kind of file-format hygiene just isn't supported, and would require much bigger changes to file writing code.

Currently we don't consider it a bug.

The Blend file writes Blender structures as they're stored in memory, So even if this one issue were resolved - there are many places where setting a relative path for example - will leave part of the absolute path after the trailing null terminator - for example. If this were as simple as changing file writing in a few places, it may be worth resolving. But I'm afraid this kind of file-format hygiene just isn't supported, and would require much bigger changes to file writing code. Currently we don't consider it a bug.

Fable Fox commented

2015-07-27 11:52:23 +02:00

Added subscriber: @fablefox

Fable Fox commented

2015-07-27 11:52:23 +02:00

"Currently we don't consider it a bug."

While I agree with that, I think the point raised by the OP "but could be an issue if the particular .blend file is output from production machines in a company, which can leak sensitive project names and other information." could be a mission critical in getting Blender used by studios.

In a matter of fact, this is where Ton and several others sit down, talk clearly, and release another minor version of current release.

It may not be a bug, but if obviously a flawed design (IMHO) and is a very critical thing.

"Currently we don't consider it a bug." While I agree with that, I think the point raised by the OP "but could be an issue if the particular .blend file is output from production machines in a company, which can leak sensitive project names and other information." could be a mission critical in getting Blender used by studios. In a matter of fact, this is where Ton and several others sit down, talk clearly, and release another minor version of current release. It may not be a bug, but if obviously a flawed design (IMHO) and is a very critical thing.

Ton Roosendaal commented

2015-07-27 12:32:19 +02:00

Added subscriber: @Ton

Ton Roosendaal commented

2015-07-27 12:32:19 +02:00

If people or companies are concerned, it will be quite simple to make a .blend anonimizer.
We can mark it as a todo item, and wait for the first case of someone who needs it. A big studio I mean.

And to be honest, I have to see the first big studio that shares their files on public forums.

If people or companies are concerned, it will be quite simple to make a .blend anonimizer. We can mark it as a todo item, and wait for the first case of someone who needs it. A big studio I mean. And to be honest, I have to see the first big studio that shares their files on public forums.

Fable Fox commented

2015-07-27 13:36:52 +02:00

"And to be honest, I have to see the first big studio that shares their files on public forums."

Hi Ton, it doesn't have to be public forum, but between contractors / vendors.

Imagine Studio A might hire VFX House Z to do a scene. But VFX House Z might also do special effect for Studio B.

You (Studio A) may doesn't want VFX House Z to share with Studio B what movies you have in the pipeline. Getting movies out earlier is enough to steal profit / thunder.

Anyway, thanks for the reply.

"And to be honest, I have to see the first big studio that shares their files on public forums." Hi Ton, it doesn't have to be public forum, but between contractors / vendors. Imagine Studio A might hire VFX House Z to do a scene. But VFX House Z might also do special effect for Studio B. You (Studio A) may doesn't want VFX House Z to share with Studio B what movies you have in the pipeline. Getting movies out earlier is enough to steal profit / thunder. Anyway, thanks for the reply.

Brecht Van Lommel commented

2015-07-27 13:47:48 +02:00

Added subscriber: @brecht

Brecht Van Lommel commented

2015-07-27 13:47:48 +02:00

In my experience with production files from big VFX studios, such absolute paths revealing names of projects or characters are everywhere and no one is protecting against that. In fact relative paths seem to be quite rare and a lot of VFX software isn't capable of handling relative paths as well as Blender does.

Brecht Van Lommel commented

2015-07-27 13:53:06 +02:00

What studios will often do is use code names or acronyms for the project directory, I don't know if that's a protection strategy or just because the name hasn't been decided yet or it's too long to type.

JT Nelson commented

2015-07-27 20:35:13 +02:00

Added subscriber: @jta

Kevin Mossey commented

2015-08-11 04:37:29 +02:00

Added subscriber: @KevinMossey

Kevin Mossey commented

2015-08-11 04:37:29 +02:00

So, I only use Blender for a hobby, as I'm an engineer by trade - but I wanted to say that any serious engineering firm that is going to share any kind of technical document(s) with anyone else, will have that person or organization sign an NDA (Non-disclosure agreement) before handing anything over. At that point, it doesn't matter if you know anything of the internal path names, etc. If that firm leaks any of that information, they are now liable.

I would imagine any large studios would work the same way - if they have something secret they need to share, wouldn't they force everyone involved to sign NDAs? I mean, I had to sign one just to interview at my current job, then I had to sign another one when I got the offer.

I would consider this a non-issue.

So, I only use Blender for a hobby, as I'm an engineer by trade - but I wanted to say that any serious engineering firm that is going to share any kind of technical document(s) with anyone else, will have that person or organization sign an NDA (Non-disclosure agreement) before handing anything over. At that point, it doesn't matter if you know anything of the internal path names, etc. If that firm leaks any of that information, they are now liable. I would imagine any large studios would work the same way - if they have something secret they need to share, wouldn't they force everyone involved to sign NDAs? I mean, I had to sign one just to interview at my current job, then I had to sign another one when I got the offer. I would consider this a non-issue.

Omar Emara commented

2022-11-07 09:55:24 +01:00

Added subscribers: @WCN, @ThomasDinges

Sign in to join this conversation.

No Label

Download

What's New

Blender Studio

Manual

Developers Blog

Documentation

Benchmark

Blender Conference

Development Fund

One-time Donations

Path contained within .blend is may be too verbose #45546