Skip to content

RingMouse v1.1.2

Choose a tag to compare

@github-actions github-actions released this 04 Oct 20:58
· 9 commits to main since this release

Security & stability

A security and robustness hardening release. No breaking changes; existing configurations keep working.

  • Import safety: the import dialog now clearly warns when a configuration runs programs or PowerShell when a
    button or ring segment is triggered (including actions that request admin rights). Only import configurations from a
    source you trust.
  • No secrets in the logs: snippet text, inline PowerShell commands and launch arguments are no longer written to
    logs\ringmouse-*.log.
  • Autostart task verification: the "scheduled task with highest privileges" is read back and verified after it is
    created, and removed if it does not match – closing a local tampering window.
  • Data folder is locked down on startup (only your account, SYSTEM and administrators).
  • More robust: the app is hardened against malformed device responses, the mouse pointer can no longer stay hidden
    after an error, a stuck mouse button on ring close was fixed, and the device watchdog can no longer take the process
    down. DPI values are clamped to a sane range before being sent to the mouse.
  • New SECURITY.md: documents the trust model
    (the configuration is executable), the uiAccess residual risk, and how to report a vulnerability.
  • install-uiaccess.ps1 no longer adds its certificate to the TrustedPublisher store (the Root store is enough for the
    signature check uiAccess requires). If you use the uiAccess variant, re-run the script and confirm
    Settings → Info shows "uiAccess yes".

Downloads

File What it is
RingMouse.exe The app – a single self-contained file, no installation and no .NET needed
RingMouse-uiAccess.zip Optional variant that may also operate windows running with admin rights (see the README)
ringmouse-probe.exe Diagnostic tool for bug reports
SHA256SUMS.txt SHA-256 checksums of all files

Updating: quit RingMouse (tray → Exit), replace RingMouse.exe, start it again. The exe is not code-signed, so Windows
SmartScreen may warn on the first start: More info → Run anyway. Verify your download against SHA256SUMS.txt.


Deutsch: Sicherheits- und Stabilitäts-Release ohne funktionale Einschränkungen. Der Import warnt jetzt deutlich,
wenn eine Konfiguration Programme oder PowerShell ausführt; Textbausteine, PowerShell-Befehle und Startargumente landen
nicht mehr im Log; die Autostart-Aufgabe wird nach dem Anlegen überprüft; der Datenordner wird beim Start abgeriegelt.
Dazu Härtung gegen fehlerhafte Geräteantworten, Absturzschutz (der Mauszeiger bleibt nie versteckt) und eine neue
SECURITY.md. Wer die uiAccess-Variante nutzt, sollte
install-uiaccess.ps1 erneut ausführen und unter Einstellungen → Info „uiAccess ja" prüfen.