Spell Check (Exfiltration Vulnerability)

[sbaty]

So far, I have not found that PTC has informed its customers exactly where (what third-party) text was being sent to for spell checking in Windchill.  I believe customers have a right to know when their data is being sent to an outside party, the details of to whom the data is sent.

[JHall]

@sbaty 

I agree. It's our data, just who is it being sent to?

James

[MichaelChatel]

Hi Sbaty,

A valid concern and question.

I would suggest (if you haven't already), making sure to open a Support case for this, and making sure you reference the below knowledge article, and SPR 8341861.  Support can make sure that customers are attached to the SPR.

https://www.ptc.com/en/support/article?n=CS306405

[MichaelChatel]

Here is a more in-depth article about your concern:

https://www.ptc.com/en/support/article?n=CS307479

...with PTC's plans to move away from the external Spell checker service.

Again, I would highly suggest you make sure to open Support cases to ask about this.