Improve error message when user has changed mouse cursor

[NekoJonez]

When an user changes the mouse cursor via some tool and you try to start SEB, it will crash with a generic error message. Since, changing back to the original cursor and restarting SEB works fine... The error message should reflect that. This would help in troubleshooting during exams.

[dbuechel]

Thanks for the input. I guess we could add a specific error message, though with security related issues we normally don't want to make it too easy for users to figure out why SEB refuses to startup.

@danschlet What do you think?

[NekoJonez]

It's something that you can see both ways. On one hand, I totally understand the reason of not telling why SEB blocks users from starting. On the other hands, the more "little things" SEB checks and doesn't let the user through... Can be annoying if SEB is used during exams.

I think we need to look at this case by case. Since if we have some internal error code like err_cur and a list, people can simply "Google it" and find it.

[danschlet]

Is SEB just quitting with the regular Couldn't start session (or similar) message or really crashing? @dbuechel, I think in this case it makes sense to show an error message "SEB doesn't allow modified cursors" or similar.

[NekoJonez]

It's the generic like this:

(Yes, screenshot from other issue but the error message is the exact same)

[dbuechel]

Excellent, then I shall add a specific error message for the cursor verification.

[peterbuysse]

The problem is that our students now intall the cursor program deliberately to sabotage the exam. Is there a security risk to allow such programs while starting SEB?

[dbuechel]

There is a (at least theoretical) possibility to cheat using custom cursors, how practical it in the end would be is not entirely clear (analog cheating surely would be a lot easier). But we decided to go the safe way and validate the active cursor configuration.

As for the modding resp. cursor customization software: If you know what software it is, you can simply add it to the list of prohibited applications and activate the auto-termination option (see https://safeexambrowser.org/windows/win_usermanual_en.html#ProhibitedProcessesSection > Force Quit). Whether that reverts the active cursors would however need to be tried out, most likely it doesn't, but it at least may have a discouraging effect on the students.

[NekoJonez]

There is a (at least theoretical) possibility to cheat using custom cursors, how practical it in the end would be is not entirely clear (analog cheating surely would be a lot easier). But we decided to go the safe way and validate the active cursor configuration.

As for the modding resp. cursor customization software: If you know what software it is, you can simply add it to the list of prohibited applications and activate the auto-termination option (see https://safeexambrowser.org/windows/win_usermanual_en.html#ProhibitedProcessesSection > Force Quit). Whether that reverts the active cursors would however need to be tried out, most likely it doesn't, but it at least may have a discouraging effect on the students.

Speaking from experience here... No, quitting the program usually does not. Since it installs an .ani/.cur file that autoloads and all.
Usually I have to delete the actual cursor file.

[NekoJonez]

The problem is that our students now intall the cursor program deliberately to sabotage the exam. Is there a security risk to allow such programs while starting SEB?

Well, I have seen an attempt yesterday where the student painted a formula inside the mouse cursor for maths. Yeah... But totally understand where you are coming from.

[dbuechel]

Well, I have seen an attempt yesterday where the student painted a formula inside the mouse cursor for maths.

Exactly, that kind of cheating. Simply learning the formula would appear to be less effort overall, but alas, I reckon validating the cursor configuration thus indeed makes sense.

[peterbuysse]

Thank you for the explanation. Now I understand the reason why cursor configuration is validated and the sudden interest of our students in changing cursors :)

[github-actions]

This issue is stale because it has been open for 28 days with no activity. It will soon be closed automatically if there are no updates.