![]() ![]() For example, this would mean that only the webpage should be able to access the service however, the Logitech Options app does not properly authenticate these connections. The WebSocket service allows connections from any website, and that type of service should check the origin of the calling webpage so only authorized webpages can open a connection. While such crashes can often lead to exploitable security bugs, Ormandy found an even easier way to compromise the software. The first flaw Ormandy found is the ability to crash that server by sending JSON data with incorrect data types. Upon inspecting the Logitech Options app, Ormandy discovered it opened a local WebSocket server that expects JSON messages. The software uses Electron, an open source framework that enables users to develop cross-platform desktop applications in JavaScript, but which has also been subject to serious security vulnerabilities. 1, and none of the issues he had reported were fixed.Īccording to his report, Ormandy tried to reconfigure a button on his Logitech mouse in Windows and learned that, in order to do so, he had to download the 149 MB Logitech Options app. However, it seems the Logitech developers didn't resolve the issue: Ormandy tested the latest version, released on Oct. "They assured me they understood the issues and were planning to add origin checks and type checking," Ormandy wrote on the Project Zero bug tracker. Ormandy contacted Logitech and met with Logitech engineers in September. He published details about the critical vulnerability when Logitech took more than 90 days to address the issue. The g613 is a well made product but I would’ve gotten a smaller keyboard if I would’ve known the sacrifices I would need to make to use the extra keys.Tavis Ormandy, vulnerability researcher with Google's Project Zero, found the flaw in the Logitech Options app when he tried to rebind a button on his Logitech mouse. I tried a free better touch tool software trial but it reads the Logitech specific keys as “function” keys instead of unique keys. I only wanted to use this software for the Logitech specific buttons on my keyboard. ![]() I’m not letting the software launch now and will most likely remove the software in the future. The Logitech forums did not have anything nice to say about this software and frankly made me more concerned. ![]() They did not provide any explanation to their need to record my screen. I did not allow access and the software is basically nonfunctional without the access. The software asked permission to record my screen in Big Sur. This is Logitech’s gaming software but I purchased a g-series for the mechanical keyboard not for the gaming aspect. I installed the Logitech “G-hub” software for the new Big Sur update. If you’re looking to avoid it, for any reason, or no reason at all. Maybe one of those will work better for you than the Logitech software. StreamDeck if you want special buttons, Keyboard Maestro if fn- or combo-keys are good enough, and so on. ![]() Might work without the Logitech software, might not.įor more advanced features, there are other tools. I don’t use either of those, they would cramp my fingers if I used them regularly. There’s another button (with an icon that looks like the Windows logo), and the scroll wheel can also be pushed side-to-side for side scrolling (I guess). Regular click, right/Control-click, and the scroll wheel all work without the Logitech software. It has more buttons/functions than I want to use, myself. (Long-term chronic tendonitis sufferer here.) I’ve tried a bunch, and really like the Logitech M557, for the way it feels in my hand. I’m personally a fan of simplicity with my mouse. (Not so much for the original poster, who answered this question, but for others.) Which device do you have, and how advanced is your usage? If the device does what you want without the Logitech software, then don’t install it. When I used Logitech mice I ended up managing all the gesture buttons and wheel controls with Steermouse, and I liked additional unique features like being able to snap the cursor to specific areas (eg close button), and you could make fine-grained adjustments to scroll speed and acceleration That’s why alternative drivers like Steermouse and USB Overdrive exist. But I used Logitech MX Master mice for many, many years before going Magic Trackpad, and the Logitech Control Center software was always problematic. If the included Logitech software finally works without freezing, or causing skips or kernel panics - all things it did for over a decade - then I congratulate them for finally getting their act together. Logitech software is used to define what mouse buttons can do – far more options than Apple software provides, though you could probably cobble together other configuration methods with BTT perhaps. ![]()
0 Comments
Leave a Reply. |