Release KingsRAM v1.2.0 - Security & reliability hardening · KingIcyCreamProjects/Roblox-Account-Manager

KingsRAM v1.2.0 — Security & reliability hardening

A broad hardening pass over the whole app, driven by a multi-agent audit and then applied per finding.

Your login cookies are protected properly at rest. The account store now lives in a locked, per-user folder (%LOCALAPPDATA%\KingsRAM) instead of next to the app — so it can't get swept into OneDrive/Downloads/shared folders — and it's encrypted with a random per-install key (DPAPI-wrapped) rather than a value baked into the app. Your existing accounts are migrated and re-encrypted automatically the first time you launch.
The local web API is deny-by-default. Requests from another machine now always require the password (a whole class of endpoints previously required none), login cookies are only ever returned over a local connection, and the Nexus control socket requires a per-session secret for non-loopback clients.
Stronger master password and the app refuses to silently load an unencrypted store unless you explicitly opt out. Sensitive clipboard copies (tickets/cookies/passwords) auto-clear.

Fixed a concurrency bug that could crash background threads and drop cookie saves.
Fixed the update-version check (double-digit versions were ordered wrong), plus a batch of crashes/races: log-stream disposal, a settings dictionary, dialog cancels, null-derefs, malformed-input parsing, and a truncated-store guard.

Debounced saves (no more a full write per keystroke), cached/compiled hot paths, background account import with progress, and assorted UI polish (theme-aware colors, dialog captions, recursive theming).

⚠️ After updating, don't run an older KingsRAM build — it looks for your accounts in the old location and won't see the migrated store.

A fork of Roblox Account Manager by ic3w0lf22, licensed under GNU GPLv3.