Keylogger? Has anyone verified?

[Liz-with-a-Smile]

This just appears to be the perfect keylogger. How to steal all keystrokes? Make it a cute cat game that...doesn't have other means of monetization it seems....

Sus.

If anyone has followed through and checked the claims made by the dev, please let me know.

He claims the code is not obfuscated and thus decompilable, but also says "do it yourself and check"... which isn't a "no, of course there's no malicious code." So, I'd trust other people's claims over that kinda of dare...

Especially when most people don't have the skills or knowledge to check with any level of certainty. Myself included.

Anyway. Super sus....

Update:
This thread is old. Stop replying to it. Thanks. 👍
Keep personal grips to dms, instead of bumping threads to be upset over nothing. Thanks again.

[Spiced Pigeon]

if you want it written:
no there is no malicious code
but yes let others verify it for you..

[Spiced Pigeon]

and i hope you are that suspicious to all of the things you install and run 24/7 because i'm showing you that i react on keystrokes others might not

[rapunzette]

Originally posted by Liz-with-a-Smile:

Make it a cute cat game that...doesn't have other means of monetization it seems....

The game is nothing but a means of monetization.

The vast majority of players are either A) Buying cosmetics on the market because drop rates are designed to be too low to "earn" the hats you want or B) Trying to get rich by selling cosmetics to group A. Either way the dev profits since they get a cut of every single market transaction.

[Liz-with-a-Smile]

Originally posted by Spiced Pigeon:

if you want it written:
no there is no malicious code
but yes let others verify it for you..

I hope they do. But I haven't seen anyone verify anything yet. This game is specifically suspicious because of what it is mechanically. That's the only reason I'm using extra caution. No offense meant at all. I see sus, I ask questions.

[Snepderg]

Originally posted by Liz-with-a-Smile:

Originally posted by Spiced Pigeon:

if you want it written:
no there is no malicious code
but yes let others verify it for you..

I hope they do. But I haven't seen anyone verify anything yet. This game is specifically suspicious because of what it is mechanically. That's the only reason I'm using extra caution. No offense meant at all. I see sus, I ask questions.

The game isn't obfuscated, you can use programs to read the source code.

Originally posted by Spiced Pigeon:

what syntheticheart said
but also:

i don't obfuscate my code so you all can hold me accountable :)
it's fully transparent
you can just look at the code yourself if you want to with apps like DnSpy or similar

[SL_Zerocore]

Why are these appearing so much??? I blame you BonziBuddy >:(

I have fully looked into the source, and can confirm with undeniable proof there is NO keylogging or any spyware hidden inside.

If it wasn't for BonziBuddy, desktop companions wouldn't be so suspect to scrutiny, but that darn spying malware just had to exist.

[Vinter]

Originally posted by SL_Zerocore:

Why are these appearing so much??? I blame you BonziBuddy >:(

I have fully looked into the source, and can confirm with undeniable proof there is NO keylogging or any spyware hidden inside.

If it wasn't for BonziBuddy, desktop companions wouldn't be so suspect to scrutiny, but that darn spying malware just had to exist.

I've never heard of BonziBuddy but the first thing I thought of is wow, this has over 100,000 people on it and it could easily be grabbing everything people are typing and doing who knows what with it....training AI, keylogging..etc... so I think it's a general suspicion that has nothing to do with whatever you are talking about.

[Liz-with-a-Smile]

Originally posted by SL_Zerocore:

Why are these appearing so much??? I blame you BonziBuddy >:(

I have fully looked into the source, and can confirm with undeniable proof there is NO keylogging or any spyware hidden inside.

If it wasn't for BonziBuddy, desktop companions wouldn't be so suspect to scrutiny, but that darn spying malware just had to exist.

I've also...never heard of what you are talking about. I find a game that does nothing but check how many times you pressed your keyboard- suspicious. The thing is, most scammers take the easiest methods to get what they want, and this just screamed --- oh no, that's the perfect keylogger scam. But thanks for checking. Appreciated. I have to ask, solely because I don't have the knowledge of how to verify that myself. I assume its safer asking strangers who gain nothing from the game, then just taking the words of the developers who ...would gain a lot from it. So, thank you for being helpful.

[SL_Zerocore]

Originally posted by Liz-with-a-Smile:

Originally posted by SL_Zerocore:

Why are these appearing so much??? I blame you BonziBuddy >:(

I have fully looked into the source, and can confirm with undeniable proof there is NO keylogging or any spyware hidden inside.

If it wasn't for BonziBuddy, desktop companions wouldn't be so suspect to scrutiny, but that darn spying malware just had to exist.

I've also...never heard of what you are talking about. I find a game that does nothing but check how many times you pressed your keyboard- suspicious. The thing is, most scammers take the easiest methods to get what they want, and this just screamed --- oh no, that's the perfect keylogger scam. But thanks for checking. Appreciated. I have to ask, solely because I don't have the knowledge of how to verify that myself. I assume its safer asking strangers who gain nothing from the game, then just taking the words of the developers who ...would gain a lot from it. So, thank you for being helpful.

Originally posted by Vinter:

Originally posted by SL_Zerocore:

Why are these appearing so much??? I blame you BonziBuddy >:(

I have fully looked into the source, and can confirm with undeniable proof there is NO keylogging or any spyware hidden inside.

If it wasn't for BonziBuddy, desktop companions wouldn't be so suspect to scrutiny, but that darn spying malware just had to exist.

I've never heard of BonziBuddy but the first thing I thought of is wow, this has over 100,000 people on it and it could easily be grabbing everything people are typing and doing who knows what with it....training AI, keylogging..etc... so I think it's a general suspicion that has nothing to do with whatever you are talking about.

For all I honestly know, BonziBuddy might have been actual spyware as it has gone onto meme infamy, most probably because of Vinesauce Joel, and it could be his spyware knacks by said streamer are only a joke...it probably wasn't spyware at all.

So maybe, instead, the suspicions are stemming from the fake game scams that had been on the rise such as PirateFi and a couple others, so perhaps that's where the conspiracy has begun to make the rounds.

Correct me on any of that if i'm wrong!

[Liz-with-a-Smile]

Originally posted by SL_Zerocore:

Originally posted by Liz-with-a-Smile:

I've also...never heard of what you are talking about. I find a game that does nothing but check how many times you pressed your keyboard- suspicious. The thing is, most scammers take the easiest methods to get what they want, and this just screamed --- oh no, that's the perfect keylogger scam. But thanks for checking. Appreciated. I have to ask, solely because I don't have the knowledge of how to verify that myself. I assume its safer asking strangers who gain nothing from the game, then just taking the words of the developers who ...would gain a lot from it. So, thank you for being helpful.

Originally posted by Vinter:

I've never heard of BonziBuddy but the first thing I thought of is wow, this has over 100,000 people on it and it could easily be grabbing everything people are typing and doing who knows what with it....training AI, keylogging..etc... so I think it's a general suspicion that has nothing to do with whatever you are talking about.

For all I honestly know, BonziBuddy might have been actual spyware as it has gone onto meme infamy, most probably because of Vinesauce Joel, and it could be his spyware knacks by said streamer are only a joke...it probably wasn't spyware at all.

So maybe, instead, the suspicions are stemming from the fake game scams that had been on the rise such as PirateFi and a couple others, so perhaps that's where the conspiracy has begun to make the rounds.

Correct me on any of that if i'm wrong!

I can't speak for others. I solely felt this was suspicious because of its mechanics. It just counts keystrokes. That's sus all by itself. I don't know what your talking about beyond that. 🤷🏾‍♂️ I'm not up to date on cyber security news? I'm only cautious about things in a general, generic sense. Don't download something that says its recording your keyboard ...is just a general rule in my mind. But I like this Bongo Cat a lot, so... Yeah, that's why I asked around. It's no bid deal in the end. I don't think it's a conspiracy to be concerned about a program that does stuff like this. At least not from me, specifically. So, IDK. But yeah, lots of software can do this stuff in theory, not all will make it feel sus though. But it's all good, so no worries.

[oddj]

Originally posted by Liz-with-a-Smile:

I can't speak for others. I solely felt this was suspicious because of its mechanics. It just counts keystrokes. That's sus all by itself. I don't know what your talking about beyond that. 🤷🏾‍♂️ I'm not up to date on cyber security news? I'm only cautious about things in a general, generic sense. Don't download something that says its recording your keyboard ...is just a general rule in my mind. But I like this Bongo Cat a lot, so... Yeah, that's why I asked around. It's no bid deal in the end. I don't think it's a conspiracy to be concerned about a program that does stuff like this. At least not from me, specifically. So, IDK. But yeah, lots of software can do this stuff in theory, not all will make it feel sus though. But it's all good, so no worries.

How is COUNTING keystrokes suss really?
If its just a count, and not values ... there is nothing more suspicious than most telemetry systems that obfuscate.

The count is mostly meaningless. Its the values (transmitted raw and with associated context) that would seem to be the problem. Maybe, as a stretch, raw counts with some context might become a problem at some point.

[Draudem]

Originally posted by Vinter:

Originally posted by SL_Zerocore:

Why are these appearing so much??? I blame you BonziBuddy >:(

I have fully looked into the source, and can confirm with undeniable proof there is NO keylogging or any spyware hidden inside.

If it wasn't for BonziBuddy, desktop companions wouldn't be so suspect to scrutiny, but that darn spying malware just had to exist.

I've never heard of BonziBuddy but the first thing I thought of is wow, this has over 100,000 people on it and it could easily be grabbing everything people are typing and doing who knows what with it....training AI, keylogging..etc... so I think it's a general suspicion that has nothing to do with whatever you are talking about.

Every game can do that. Why don't you suspect every game of it?

[oddj]

Originally posted by Draudem:

Originally posted by Vinter:

I've never heard of BonziBuddy but the first thing I thought of is wow, this has over 100,000 people on it and it could easily be grabbing everything people are typing and doing who knows what with it....training AI, keylogging..etc... so I think it's a general suspicion that has nothing to do with whatever you are talking about.

Every game can do that. Why don't you suspect every game of it?

Probably because most games do not fire key or mouse events from other applications that have focus?

[Liz-with-a-Smile]

Originally posted by VonScribbles:

Originally posted by Liz-with-a-Smile:

I can't speak for others. I solely felt this was suspicious because of its mechanics. It just counts keystrokes. That's sus all by itself. I don't know what your talking about beyond that. 🤷🏾‍♂️ I'm not up to date on cyber security news? I'm only cautious about things in a general, generic sense. Don't download something that says its recording your keyboard ...is just a general rule in my mind. But I like this Bongo Cat a lot, so... Yeah, that's why I asked around. It's no bid deal in the end. I don't think it's a conspiracy to be concerned about a program that does stuff like this. At least not from me, specifically. So, IDK. But yeah, lots of software can do this stuff in theory, not all will make it feel sus though. But it's all good, so no worries.

How is COUNTING keystrokes suss really?
If its just a count, and not values ... there is nothing more suspicious than most telemetry systems that obfuscate.

The count is mostly meaningless. Its the values (transmitted raw and with associated context) that would seem to be the problem. Maybe, as a stretch, raw counts with some context might become a problem at some point.

Registering a keystroke has happened isn't different than knowing exactly what keystroke was pressed. In code, you'd get the info of the key pressed, and then storing that would be incredibly simply afterwards. That's what a keylogger, aka malware, does. It saves each keystroke in all applications and then someone can read through the inputs for significant data like passwords, names and social security numbers.

Any application could do it, few would be bold enough to advertise they do it. This one is bold enough to advertise what its recording. Thus its suspicious.

Calling attention to its practices is what makes it worth investigating. Any man could be a murderer, but the dude with 700 guns and a locked shed is more sus than most.

This isn't a complex issue. I think it's fairly disengnious to question why this is suspicious. Anyway, this is an old thread. As many would say, don't necro old threads.

If you feel safe downloading the software, then do so. I've not heard anything since its launch. I'm personally not concerned any longer.

[Syncryptic]

It is possible to recover what keys are pressed by the cadence of how the keys are pressed, it's a technique known as "Keystroke Timing Attacks". I'm not saying that this application was created with malicious intent, but since the author was so dismissive...