Security Vulnerabilities
-
I've requested permission from my employer to install f.lux on my desktop. They certainly haven't said no, but they voiced some initial concern given the results found on this page:
[http://www.file.net/process/flux.exe.html](link url)
It appears to me that you all have been unfortunately lumped in with a 'less savory' application under the same name. Can you:
A) Confirm my suspicions?
B) Point me in the direction of any documentation regarding f.lux security compliance that might assuage their concerns?Mike
ps. Love your work! Long time user. F.lux is the first app I install on my personal computers! -
I am also looking for documentation regarding f.lux security compliance. Have you created such documentation? Also, on the following web site [http://www.file.net/process/flux.exe.html](link url) it states that flux.exe is able to record keyboard and mouse inputs. Can you confirm this statement and identify why this is required of the application?
-
Sadly I never received a reply from f.lux regarding this. My understanding is the keyboard/mouse recording software is a different piece of software which happens to use the same exe filename. Guilt by association essentially.
You might want to check out another program since this issue is getting ignored. I'd look at a program called Iris. It has lots of additional features but not free depending on what version you look at. -
I flagged this thread for moderation in hopes of getting their attention. These people are extremely busy with their personal lives (f.lux is purely a passion project - they don't get paid for it) and so they might not have seen this thread. Hopefully they will see it now and give you the answer.
-
f.lux registers some system hotkeys for disable/enable. You can turn them off in "Extras".
Here is a list of 54 virus scanners that say f.lux is OK:
https://www.virustotal.com/en/file/99f6a5fcf8c6789ff4d69a98b6cb1af9296a76f210c01a6c8a0716ef79134f2f/analysis/1405288990/@TwoCables don't know what you mean by this comment. I am working on f.lux every day, but like many small companies, we do not have a fulltime support staff.
-
@herf Thank you
-
@herf Isn't that Virustotal list you posted outdated by 2 years, 4 months ago though? A current Virustotal List has 2 Virus Scanners out of 56 scanners claiming they detected something. https://www.virustotal.com/en/file/2696c35394ca9125098458fc080461b6c841d6d8fd263b40270d21a8823c65b0/analysis/1481097941/ Any idea why this happened?
-
@mikeciz Well, they did just release an update, now 3.12 for windows... so they are very serious about it.
