Security EN

Security — English

Privilege model

• Normal runtime runs without administrator privileges.
• Switching the default output does not require elevation.
• Changing Windows Audio Enhancements launches a one-off UAC helper, performs the change, verifies it and exits.

Downloads

The installer downloads the release ZIP from GitHub and checks it against the published SHA-256 before running. If the checksum does not match, installation fails safely: do not disable that check.

The one-line bootstrap also downloads the latest release and requires its matching .sha256 asset before extraction.

Logitech G HUB

PRO X 2 mode uses a local WebSocket:

ws://localhost:9010

This is not a public/official Logitech API and can change in future G HUB versions. Connections have bounded timeouts; failure is treated as unknown state, never as “headset off”.

IDs and local data

config.json stores Windows audio endpoint Item IDs for the current machine. They are local identifiers required to target outputs, not secrets, and should not be copied between machines.

The volatile G HUB deviceId is not persisted; it is rediscovered.

The repository/releases should never contain user-specific GUIDs, tokens or credentials.

Fail-safe policy

On Unknown, invalid CSV export, inaccessible G HUB or any untrustworthy state read, AutoSwitch does not switch output. Doing nothing is safer than interpreting a failure as a disconnect.

See also SECURITY.md.