Skip to main content
J
Josh Yank
Participant
August 8, 2015
Answered

Any updates on comparable alternatives to CHM output?

  • August 8, 2015
  • 2 replies
  • 2324 views

Just wondering if Adobe is offering any comparable alternative to the CHM output file (as Microsoft Security Update 896358 will not allow CHM's to work when placed on the network)?

I'd install it locally, but as I understand the security issue, the CHM remains a security risk if installed on the client.

WebHelp is not currently an option in my situation (can't host the files).

I know there are workarounds, but I'm not to enthused about the registry edits outlined in the link below, either, and as this post points out, the CHM remains a security risk even if you are willing to engage in registry edits:

CHM Files Not Working

Anyone know if Adobe has, or is planning to, provide another option?

Thanks,

Josh

This topic has been closed for replies.
Correct answer Peter Grainge

Sorry to differ Rick but I have seen a report of CHMs being used.

http://tinyurl.com/qbs6xpm

Regardless of any security risk, I would not adopt AIR any more as Adobe have not updated that option for several versions of RoboHelp now. It simply did not take off. There were some issues because users realistically needed admin rights to use it and in many organisations that was locked down.

I think it is correct to say that CHMs are less of a security risk when installed locally but heck, given the names of the companies now being hacked, if they cannot be secure then what can?

See www.grainge.org for RoboHelp and Authoring tips

@petergrainge

2 replies

E
Eager Beager
Inspiring
August 10, 2015

CHM files aren't inherently bad. Just don't trust one that's been e-mailed to you by a stranger. Same goes for DOC files, DOCX files (i.e., MSOffice files in general), and maybe PDF files.

Aside from WebHelp output, consider either Responsive HTML or PDF.

Captiv8r
Captiv8r
Legend
August 8, 2015

Hi Josh

My Heaven's! Are we working in a super secure NSA environment?

I'm joking, of course, but I have to say that even though Microsoft deemed CHMs on a network to be somewhat of a security risk, I have never ever heard of anyone having anything bad happen to them via a CHM file. And according to Adobe, CHM output is still a pretty popular output type according to their research.

The only alternative is either the AIR output (which can also be viewed as a security risk) or any of the web based outputs. (responsive, multiscreen, webhelp, etc) And truth be told, there are even potential security issues with those output types.

Cheers... Rick

    Peter Grainge
    Community Expert
    Peter GraingeCommunity ExpertCorrect answer
    Community Expert
    August 9, 2015

    Sorry to differ Rick but I have seen a report of CHMs being used.

    http://tinyurl.com/qbs6xpm

    Regardless of any security risk, I would not adopt AIR any more as Adobe have not updated that option for several versions of RoboHelp now. It simply did not take off. There were some issues because users realistically needed admin rights to use it and in many organisations that was locked down.

    I think it is correct to say that CHMs are less of a security risk when installed locally but heck, given the names of the companies now being hacked, if they cannot be secure then what can?

    See www.grainge.org for RoboHelp and Authoring tips

    @petergrainge

    Use the menu (bottom right) to mark the Best Answer or Highlight particularly useful replies. Found the answer elsewhere? Share it here.
      Captiv8r
      Captiv8r
      Legend
      August 9, 2015

      Thanks for the link, Peter. I knew that Microsoft blocked them for security reasons. After looking at this article I can easily see where a CHM could be rather nefariously used. Admittedly, seeing that article is the first time I have seen exactly how a CHM could be used and that it's actually happened.

      I do agree with you regarding AIR and really wouldn't recommend it. I mentioned it for simple reason that Josh was asking about alternatives.

      So really, this sort of begs the answer about the whole "security risk" issue in general. I think what we may be dealing with here is somewhat of a visceral reaction that we see so often in the United States when folks hear the term "Socialism". Folks here hear that term and because of it being hammered into their heads over the years, they have an immediate distrust and they bristle upon the mere mention.

      The statement sounds ominous. CHMS are a huge security risk. Even so much that Microsoft (the very folks that are responsible for creating the CHM format) BLOCK using them!!! It all sounds so scary, as if merely opening one up on your system could subject you to anything!

      And yes, literally that *COULD* be the case. If you indiscriminately just decide to download and open any old CHM file you stumble across, no?

      The thing is, using RoboHelp to create a CHM will result in a perfectly usable (and virus free and with no security threat whatsoever) CHM file. As long as you are using RoboHelp to produce your CHM files, there is basically a zero security threat level in that resulting CHM. So my gut tells me that many folks (possibly even Josh here) look at it and say "well I'm certainly NOT going to give MY users an awful risky CHM file".

      Cheers... Rick

        Terms & ConditionsAccessibility statement
        Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices