TaskbarMonitor 1.1.2 — security hardening
f42ac4d
This commit was signed with the committer’s verified signature.
MarllonGomes
Marllon Gomes
Security-hardening release following a full audit. Recommended update for all users.
Security fixes
- Privilege-escalation hardening. The app runs elevated at logon, so its executable must live where only administrators can write. The installer already uses Program Files (safe); the portable build and the "Start with Windows" menu now refuse or warn before enabling the elevated startup task from a user-writable folder (Downloads, Desktop, a data drive…), which would otherwise let any code running as you gain elevated access at logon.
- Safe process replacement. Updates only replace an instance launched from our exact image — never an unrelated process that happens to be named
TaskbarMonitor. - No binary planting.
schtasks.exeis invoked by its full System32 path. - Legacy
BinaryFormatterdisabled (a dependency had re-enabled this RCE-prone serializer). - Robustness: capped
error.log, race-safe sensor-timer teardown, x86-safe interop, tray icon freed on exit. - Docs & policy: added SECURITY.md (disclosure policy + the elevated / kernel-driver security model) and
THIRD-PARTY-NOTICES.txt(MPL-2.0 for LibreHardwareMonitor). CI now runs with a least-privilege token and a pinned Inno Setup.
Fixes & improvements
- Disk temperature now picks the representative sensor (SATA
Temperature/ NVMeComposite Temperature) and ignores the Warning/Critical thresholds and the hotspot — more accurate per-drive readings. - Values rendered in a slightly heavier Segoe UI Semibold.
- Stays on the sensor library version that reads Intel CPU temperature correctly.
Verify your download
Binaries are unsigned; SmartScreen may warn. Check the SHA-256 hashes against SHA256SUMS.txt:
Get-FileHash .\TaskbarMonitor-Setup-1.1.2.exe -Algorithm SHA256Downloads
| Asset | Notes |
|---|---|
| TaskbarMonitor-Setup-1.1.2.exe | Recommended — run and done, no requirements |
| TaskbarMonitor-1.1.2-win-x64.zip | Portable — requires the .NET 8 Desktop Runtime |
| TaskbarMonitor-1.1.2-win-x64-self-contained.zip | Portable, no runtime required |
| SHA256SUMS.txt | Checksums for the above |