Package request for Icy software

[Aramis]

Hello,

The scientific community makes extensive use of the Icy software.

https://icy.bioimageanalysis.org/

It would be beneficial to package this software for Windows, Linux, and Mac.

Sincerely,

[blemoigne]

Hello again,
This software has the same operational problem, failing to adhere to best security practices in a professional environment. We sent this message to the software publisher on their forum:

Code: Select all

Subject: Installation path recommendation – conflict with security best practices

Dear Support Team,

I hope this message finds you well.

While reviewing your installation documentation, I noticed that you recommend not installing your software in the “Program Files” directory due to potential permission issues.

However, according to security best practices and government cybersecurity agencies — such as ANSSI (the French National Cybersecurity Agency) and similar organizations like NIST (U.S. National Institute of Standards and Technology) and ENISA (European Union Agency for Cybersecurity) — it is strongly recommended that applications be installed in system-protected directories such as Program Files.

In professional environments, execution of binaries is restricted to trusted paths (e.g. C:\Program Files and C:\Program Files (x86)) to prevent the execution of untrusted or potentially malicious code.
This policy is commonly enforced through application whitelisting and endpoint security controls, which are standard practice in enterprise and government environments.

Would it be possible for you to review your installation process or adjust your software so that it can safely run from within Program Files while maintaining proper permission handling ?

This change would greatly facilitate deployment in secured and compliant environments.

Thank you for your attention, and please let me know if you would like more details about these compliance requirements.

Kind regards,

We'll see if we can still get it working in program files.
Best regards,
Bertrand

[Aramis]

Hello,

thank you. This is definitely a bad habit that has developed in this community.

Sincerely,

Julien

[vcardon]

Hi Julien,

when you say "this community," do you mean the scientific software publishers' community?

If so, are you familiar with https://www.eprist.fr/qui-sommes-nous/ ? Could you put us in touch with someone from this association so we can explain this situation, which seems to be becoming widespread?

[Aramis]

Hello Julien,

When you say "this community," do you mean the scientific software publishers' community?

If so, are you familiar with https://www.eprist.fr/qui-sommes-nous/ ? Could you put us in touch with someone from this association so we can explain this situation, which does indeed seem to be becoming widespread?

Good morning,

Yes, I'm thinking of the scientific software publisher community. Packaging this type of software is always a laborious process.

Unfortunately, I have no contact with this association, which I was not familiar with otherwise.

Sincerely,