Prey: Anti-theft - Track

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
56789
Reakcje/Polubienia
41372

Prey 1.13.38​

  • Fix: Fixed a crash on macOS where permissionFile.getData() could return a raw boolean (written by the mac native location helper without string coercion) instead of the expected string, causing an uncaught .localeCompare is not a function TypeError. permissionfile.js now normalizes on read and write so already-corrupted SQLite data self-heals; listeners.js comparisons and the mac branch's error handling are also hardened as defense in depth. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Fixed two startup crashes on Windows: countLinesLoggerRestarts now wraps its file read in a try-catch to prevent an uncaught EPERM when prey_restarts.log is locked or has missing permissions; the storage_fns.set check-then-insert pattern is replaced with a single INSERT OR REPLACE to eliminate the TOCTOU race that produced "Already registered" errors for preyconf and shouldPreyCFile during concurrent agent initialization. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Fixed a TypeError crash when daemon.set_watcher is invoked through the CLI run helper: run always calls commands as command(values, cb), but set_watcher only accepts (cb), so the parsed CLI values object landed in the callback slot. Because the object is truthy, the !cb guard was bypassed and the object propagated through the full call chain, crashing as "done/cb is not a function" at the upgrade and fresh-install paths in prey_owl.js. The CLI registration now wraps the call to forward only the real callback. Callback guards in prey_owl.js are also standardised from cb && cb(...) to typeof cb === 'function' && cb(...) for consistency. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Fixed a double-callback crash in the macOS geo location socket layer: tryToSendNew could fire cbAttached on already-completed messages, causing a second callback invocation after the socket response was processed. The optional time parameter is now forwarded through writeMessage to addAndWait so callers can override the default 7 s timeout (the darwin provider passes 65 s). A null guard on inFlightCallbacks in callSocket is added as defense in depth. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
56789
Reakcje/Polubienia
41372

Prey 1.13.41​

  • Feat: Added a macOS lock IPC server so the agent can drive the bundled Prey app to lock the device, improving lock reliability on macOS. (SoraKenji)
  • Feat: Added a GNOME Shell extension–based lock for Linux desktops, improving lock reliability, and refreshed the bundled GTK lock helpers. (SoraKenji)
  • Fix: Reduced the number of PowerShell processes the agent spawns on Windows, avoiding Windows Defender CPU spikes. (SoraKenji)
  • Fix: Ensured the log retrieval action always signals completion, so the command queue is released and subsequent actions are not blocked. (SoraKenji)
  • Fix: Prevented a Windows upgrade crash (EROFS) and ensured a complete rollback that restores the current version when an upgrade fails. (SoraKenji)
  • Fix: Hardened macOS hardware collection so get_firmware_info no longer crashes when the device model name is missing. (SoraKenji)
  • Chore: Updated the bundled prey-user helper to 1.0.11 to improve network information reporting. (SoraKenji)
  • Chore: Updated wpxsvc to version 2.0.36. (SoraKenji)
Zaloguj lub Zarejestruj się aby zobaczyć!
 

Camel1965

Bardzo aktywny
Zasłużony
Dołączył
8 Wrzesień 2010
Posty
56789
Reakcje/Polubienia
41372

Prey 1.13.42​

  • Feat: On managed Windows installs, the agent now keeps its configuration, database and log next to the agent at a custom install location, and added a prey config migrate_files command to safely copy existing data from the legacy location (originals are preserved as backups). Standard installs are unaffected. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Feat: Added coherent, timestamped location storage: every accepted location is now recorded in a local audit table with the date it was obtained, and a dedicated location_data.json is included in log retrieval so installations can be reviewed with a clear location timeline. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Feat: Improved schedule-aware forced location with a smarter interval and safer handling around the configured tracking schedule. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Forced location is now gated on connectivity, avoiding failed location attempts while the device is offline. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Hardened Windows data collection by forcing a safe working directory for provider processes, preventing crashes (EROFS) under restricted filesystem conditions. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Improved resilience to transient network and socket errors (connection, TLS read, write and WebSocket abort errors), which are now handled gracefully instead of crashing or being over-reported. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Device state changes that fail while the device is offline are now persisted and retried once connectivity is restored, so no state update is lost. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: The HTTP user agent is now always set, avoiding requests with an undefined user-agent header. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Hardened file retrieval parsing and stopped counting the expected "No active session" case against the error-reporting quota. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Fix: Hardened configuration handling by guarding settings updates against missing values and tolerating a closed output pipe (EPIPE) when printing synced output. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
  • Chore: Updated dependencies to address multiple security advisories reported by npm audit (including axios, ip-address SSRF, xmldom, adm-zip, qs, brace-expansion, markdown-it, js-yaml, moment and http-cache-semantics), and removed the vulnerable sonarqube-scanner / node-forge chain. (
    Zaloguj lub Zarejestruj się aby zobaczyć!
    )
Zaloguj lub Zarejestruj się aby zobaczyć!
 
Do góry