objective-see/reikey

Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!

reikey's Issues

Ghh

Linux

Why don't you make a version also for Linux?

gamecontrollerd (/usr/libexec/gamecontrollerd) triggers ReiKey

Hey,

First of all, thank you for all your nice work on MacOS security. I really appreciate that.

Since updating to the newest version of MacOS 11.3, ReiKey (v.1.4.1) complains about gamecontrollerd (/usr/libexec/gamecontrollerd). After googling it seems that gamecontrollerd is from the OS itself and should probably be ignored if the setting "Ignore Apple Programs" is set. Correct me if i'm wrong. For now I disabled alerts manually.

Thanks :)

[Question] CGEventTap vs GlobalEventMonitoring?

Curious is there reason REI doesn't look for GlobalEventMonitoring? I noticed using GlobalEventMonitoring (once registered in your Privacy settings like CGEventTap) has the same effect. It then allows an app to view all keystrokes while the event monitor is registered.

Or am I misunderstanding the use?

Unable to quit Reikey

The "Quit"-option in the menu bar does not quit the app. It only closes the preferences window.
The only way I was able to close the app was from the Activity Monitor.

Thanks for developing this app and thank you for your work!

Chrome warns about malicious download

Hi there,

first of all: Thanks for creating ReiKey! Really love how you're helping make the Mac a safer platform with the Objective-See tool suite 👏 .

I attempted to download ReiKey with Chrome on a Mac and it actually warns about the download being (potentially) malicious:

Fun fact: The same thing does not happen with OverSight, the download (same mirror) works without a warning.

I am pretty sure the ReiKey download is fine (shasum checks out), I just wanted to let you know, as I think this might discourage users from downloading/using ReiKey. This is Google's information page on the subject. At the bottom it says:

If you're a software publisher and your binaries are flagged by Chrome, learn how to resolve malware or unwanted software issues related to your downloads.

Not sure if that would be a viable way to get ReiKey whitelisted?

Reikey keeps detecting "ViewBridgeAuxiliary"

The only other app I can think of which might trigger Reikey is Karabiner Elements.

1.4.2 on Catalina: airportd

Hi

On Catalina (10.15.7), ReiiKey identified airportd as passive listener.

Did you notice this?

notifications when using remote access

on the one hand, if someone else is trying to hijack my machine when i'm using it, having reikey throwing up notifications is a good thing.
on the other hand, if i'm trying to control my mac remotely, every time i hit the mouse, reikey throws a notification, which throws a notification dialog, which then makes the right side of the screen unusable, because every time I try to dismiss the notification, i get another.
so perhaps a way to either tone down reikey notifications (i don't think whitelisting is necessarily the way to go since someone else getting in would not notify me at all) would be good.

ReiKey Helper: crash on Mojave 10.14.2

See crash report below. Happened when accessing the hidden Bartender menu bar to click on the MailButler icon.
ReiKey Helper_2019-01-04-160118.txt

No Error Reporting Mode

Consider adding this just as was added to LuLu: objective-see/LuLu@31d9a49

Feature request: whitelist

I use BetterTouchTool, and every time my computer wakes from sleep or screensaver I get a notification from ReiKey about it. I'd love to be able to specify that I trust that process so that I don't need to constantly be dismissing notifications.

(Side note: I'm not sure if you're accepting feature requests right now, maybe that's something you prefer to do through patreon for your donors?)

Karabiner EventViewer is it exempt?

I expected ReiKey to find Karabiner when i turned it on, but it didn't.

Does it work on another layer/level?

Should I be concerned? or is Karabiner somehow exempt?

Download link is broken

The download link in the website is broken.

Status bar icon appears blurry

Big Sur - You do not have permission to open the application "ReiKey.app"

I just upgraded to Big Sur. I'm getting some messages from Reikey that I wanted to investigate, but when I try to open it, I get the following. I tried installing the latest version, too.

ReiKey alerting on relatived

Had ReiKey alert for the first time in a long time, and surprisingly it's alerting on /usr/libexec/relatived

I have Ignore Apple Programs checked. Any idea why this is getting caught?

Native Apple Silicon (M1) Support?

Any chance we could get a build with native Apple Silicon support?

Configuration Window keeps respawning

Hey,

I keep getting the configuration windows over and over again.
For example: I installed and configured it to launch at start and show no icon in the status menu bar.
When a new security event occurs it still prompts me with that same initial configuration window over and over.

Thanks for writing awesome macOS Security Software

Best regards
Andy S.