RingMouse v1.1.2
Security & stability
A security and robustness hardening release. No breaking changes; existing configurations keep working.
- Import safety: the import dialog now clearly warns when a configuration runs programs or PowerShell when a
button or ring segment is triggered (including actions that request admin rights). Only import configurations from a
source you trust. - No secrets in the logs: snippet text, inline PowerShell commands and launch arguments are no longer written to
logs\ringmouse-*.log. - Autostart task verification: the "scheduled task with highest privileges" is read back and verified after it is
created, and removed if it does not match – closing a local tampering window. - Data folder is locked down on startup (only your account, SYSTEM and administrators).
- More robust: the app is hardened against malformed device responses, the mouse pointer can no longer stay hidden
after an error, a stuck mouse button on ring close was fixed, and the device watchdog can no longer take the process
down. DPI values are clamped to a sane range before being sent to the mouse. - New
SECURITY.md: documents the trust model
(the configuration is executable), the uiAccess residual risk, and how to report a vulnerability. install-uiaccess.ps1no longer adds its certificate to the TrustedPublisher store (the Root store is enough for the
signature check uiAccess requires). If you use the uiAccess variant, re-run the script and confirm
Settings → Info shows "uiAccess yes".
Downloads
| File | What it is |
|---|---|
RingMouse.exe |
The app – a single self-contained file, no installation and no .NET needed |
RingMouse-uiAccess.zip |
Optional variant that may also operate windows running with admin rights (see the README) |
ringmouse-probe.exe |
Diagnostic tool for bug reports |
SHA256SUMS.txt |
SHA-256 checksums of all files |
Updating: quit RingMouse (tray → Exit), replace RingMouse.exe, start it again. The exe is not code-signed, so Windows
SmartScreen may warn on the first start: More info → Run anyway. Verify your download against SHA256SUMS.txt.
Deutsch: Sicherheits- und Stabilitäts-Release ohne funktionale Einschränkungen. Der Import warnt jetzt deutlich,
wenn eine Konfiguration Programme oder PowerShell ausführt; Textbausteine, PowerShell-Befehle und Startargumente landen
nicht mehr im Log; die Autostart-Aufgabe wird nach dem Anlegen überprüft; der Datenordner wird beim Start abgeriegelt.
Dazu Härtung gegen fehlerhafte Geräteantworten, Absturzschutz (der Mauszeiger bleibt nie versteckt) und eine neue
SECURITY.md. Wer die uiAccess-Variante nutzt, sollte
install-uiaccess.ps1 erneut ausführen und unter Einstellungen → Info „uiAccess ja" prüfen.