Knowledge Base

Problem

A user asks whether FaceReader's floating license — which requires internet access for activation — is exposed to a known PHP security vulnerability.

Details

Affects users running FaceReader 10 with a floating license configuration. Concern arises when public PHP vulnerabilities are disclosed, since floating license activation involves communicating with Noldus servers over the internet. The software itself still runs locally after activation.

Solution

1. The Noldus floating license server is built on ASP.NET, not PHP.
2. PHP-related vulnerabilities do not affect the Noldus licensing infrastructure.
3. Internet connectivity is required only for the license check-out/check-in process; all analysis and data processing occurs locally on the user's machine.
4. No action is required on the user's part. If the user has broader IT security concerns about network traffic, advise them to contact their institutional IT department; the Noldus license server communication is limited to license validation and does not transmit research data.
5. If new vulnerabilities relevant to ASP.NET or the Noldus license server are identified in the future, Noldus will communicate this through official channels.