This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

DRV8899-Q1EVM: GUI Security Flag on Software

Part Number: DRV8899-Q1EVM
Other Parts Discussed in Thread: DRV8899-Q1,

Tool/software:

Hi

My customer Magna is looking to evaluate the DRV8899-Q1 EVM. Their IT ran our software through some tool (https://www.virustotal.com/) and it came back with some flags that is making them hesitant to download. Is there a safe version of the EVM Software?

The other option is to use the TI Cloud Agent but they are also hesitant. Does the cloud tool upload any data to the TI cloud or other service or is it okay to use?

Regards

Kevin

  • Hi Kevin,

    The GUI tool for all our EVMs including the DRV8899-Q1EVM GUI are based on TI GUI Composer https://dev.ti.com/ which is widely used across TI business units as well as at our customers world-wide. The backend of the GUI Composer is based on Node.js a JavaScript Runtime which is commonly used in network applications. Both the desktop app and the TI Cloud based app use the exact same backend. During Runtime a local webserver is established for GUI data traffic. Perhaps this was the reason the customer's IT software flagged it. 

    The other option is to use the TI Cloud Agent but they are also hesitant. Does the cloud tool upload any data to the TI cloud or other service or is it okay to use?

    Here's the Getting Started guide for the TI GUI Composer, https://dev.ti.com/gc/v2/help/GC_UserGuide_v2/getting-started.html.  Please review this FAQ. Regarding data transactions there will be data flow between the EVM HW in both directions from and to the GUI application. Without bidirectional data flow the GUI cannot communicate with the EVM and vice-versa. These are data relevant to the EVM operation.

    TI privacy policy is available here, https://www.ti.com/legal/terms-conditions/privacy-policy.html and Terms of Use here, https://www.ti.com/legal/terms-conditions/terms-of-use.html

    Regarding the reported flag by the customer's antivirus tool let me check with our GC team and get back to you. Thank you.

    Regards, Murugavel   

      

  • Hi Kevin,

    Here's the feedback from the GC team. This particular application has been published quite some time ago and we have now changed it a bit with how we create installers for offline use. We tried couple of recently published applications and they do not seem to be getting flagged. However, we've seen it happen occasionally where some antivirus software or security software flag things incorrectly. The only way to get around this is to work with software vendor to remove the false positive.

    The customer can use the Windows installer downloaded from this link https://dev.ti.com/gallery/dl/DRV8889Group/DRV8899-Q1/ver/1.0.0?platform=win. Before clicking on this link the customer must login to dev.ti.com/gallery using their myTI credentials. If the customer's firewall does not allow Runtime installation from the web they can first download a local Runtime installer and point to it while installing the offline app. Here's the link for the Runtime Windows installer, https://software-dl.ti.com/ccs/non-esd/gui_composer/runtime/gcruntime-7.2.0-windows-installer.exe.  

    The cloud version can be run using this link, https://dev.ti.com/gallery/view/DRV8889Group/DRV8899-Q1/ver/1.0.0/ . With online version of the app (i.e. Evaluating in the cloud) we do collect some usage information. It is an online service like TI E2E or others, as per TI’s privacy policy I highlighted in my previous reply. I hope this helps. Thank you. 

    Regards, Murugavel