Bug 681 - Comodo complains of improper Global hook, harpoon.dll
Status:
RESOLVED FIXED
Component:
Core :: Win32
Version:
1.8.4
Hardware:
PC Windows XP
Importance:
P4 normal
Target Milestone:
1.8.6
Assignee:
Ray Satiro
URL:
Depends on:
Blocks:
Reported:
Sep 20 2007 23:17:01 UTC
by:
Chikin
Modified:
Mar 9 2008 20:04:23 UTC
| Id | Who | When | Size | Type |
|---|---|---|---|---|
| 112 | Disable global hooks in Workrave 1.8.5 | |||
| Ray Satiro | Sep 21 2007 23:07:18 UTC | 1198 | application/octet-stream | |
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Ray Satiro | Sep 21 2007 23:07:18 UTC | status | NEW | ASSIGNED |
| assigned_to | Raymond Penners | Ray Satiro | ||
| Rob Caelers | Oct 15 2007 20:46:48 UTC | target_milestone | --- | 1.8.6 |
| Rob Caelers | Mar 9 2008 20:04:23 UTC | status | ASSIGNED | RESOLVED |
| resolution | FIXED |
Description
Chikin Sep 20 2007 23:17:01 UTC
I just jettisoned ZoneAlarm for Comodo, which is approximately of the same popularity for a free firewall. Comodo notes that harpoon.dll uses a global hook on firefox and explorer (even when I have WR networking disabled) which can be used as a keylogger. Is there any way this could be changed to be less intrusive? I love WorkRave!
Comment 1
Ray Satiro Sep 21 2007 23:07:18 UTC
Created attachment 112 Disable global hooks in Workrave 1.8.5 ***The information here is only relevant to Workrave 1.8.5 --------------------------------------------------------- Hello, Workrave uses global hooks to monitor your activity, by default. Workrave also uses global hooks to block input when you are on a break, by default. Workrave can be used without global hooks by changing related preferences. Two preferences need to be changed to disable global hooks entirely: advanced\monitor = nohook gui\breaks\block_mode = 0 The first preference tells Workrave to use an alternate activity monitor that does not require hooks. The second preference tells Workrave not to block input on breaks. Most Workrave configurations on Windows are stored in the registry. I've attached a reg file that should change the preferences discussed here. After you see confirmation that the information has been successfully entered into the registry, a restart of Workrave is required. We need your feedback! If you have any problems, or anything at all does not function the same, let us know. You do not need to open a separate bug. *Please be aware that if you enable the alternate "nohook" monitor, there are no mouse or keyboard statistics. You can download Workrave 1.8.5 here: http://superb-west.dl.sourceforge.net/sourceforge/workrave/workrave-win32-1.8.5-installer.exe 1b732b368fae346712f55c013fd86e93 *workrave-win32-1.8.5-installer.exe Thanks, Ray
Comment 2
Rob Caelers Mar 9 2008 20:04:23 UTC
The 'nohook' keyboard/mouse monitor mentioned in Ray's comment is now used by default. Workrave no longer needs to install gobal hook for monitoring user activity. Hooks are still needed for blocking keyboard and mouse during breaks and to gather statistics. If workrave fails to install global hooks (because of tools like comodo), you lose these two features, but Workrave will still remind you to take breaks. You can disable keyboard/mouse blocking manually in the preferences. At the moment you can't disable preferences manually, so Comodo will still complain when workrave starts... I don't consider this to be a big problem, users can safely deny access to install hooks if they don't trust Workrave.