vigem discontinued

[Dan NH]

https://docs.nefarius.at/projects/ViGEm/End-of-Life/

Fred,

One of our users in the discord posted this for us. In regards to how this is packaged with the QS, is there some special location these ini files are stored (so we can disable the URL updater)?

[Fred Davison]

He gives two ways to correct the updater URL.  Running his Legacinator tool sounds like the easiest but I would wait since he is posting updates to it daily to fix bugs.  Give it some time to settle down.  There is no rush.

He also says that no more updates to ViGEmBus are planned. (He's working on a replacement)  This is mainly to plug a theoretical security hole once he no longer controls vigem.org.   He digitally signs his code so there is no risk of loading malware through the updater, it would be just reporting the ViGEmBus/HIDHide user's IP address to the new owner of the domain.  The user's IP address is already reported to many sites each time they visit any website.

On my PC the files are located at:

• "C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBus_Updater.ini"
• "C:\Program Files\Nefarius Software Solutions\HidHide\HidHide_Updater.ini"

Deleting those would also be an option, as is doing nothing.  I think the risk is minimal.

Too bad the updaters cannot update themselves.

--
You received this message because you are subscribed to the Google Groups "QuadStick" group.
To unsubscribe from this group and stop receiving emails from it, send an email to quadstick+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/quadstick/8dc3caf1-76f0-4c08-9b90-3e32ba48a732n%40googlegroups.com.

[Steven F]

I just got an alert that an update for ViGEmBus is available... should I ignore it or update?

[Fred Davison]

I would wait.

Looking at his releases for the Legacinator tool, he's been making changes to it at a furious rate.  He's even made one within the last 12 hours.  Issue 1.4.1 was very serious and be a huge PITA to fix.  That instability worries me.

I would wait until it has been a few weeks since the last change.   Let other users find the bugs.

The problem with the updater does not become real until the end of the year.  Set a calendar entry to remind you to run the Legacinator tool in December.

To view this discussion on the web visit https://groups.google.com/d/msgid/quadstick/f0e72630-9c72-4bb0-ab9f-9a921d018678n%40googlegroups.com.

[Steven F]

OK but I was referring to the actual ViGEmBus itself. 

I saw this post yesterday then this morning when I turned my PC on, I got a prompt telling me an update for ViGEmBus was available to install. I don't understand what that update was about if ViGEmBus is discontinued and won't get anymore updates. Also according to device manager I have the latest version installed already, 1.21.442. Has anyone else seen this prompt?

[Fred Davison]

I saw the same prompt.  I declined the update.

ViGEmBus and HIDHide are written by the same guy and use the same update server, therefore have the same problem.

Since it has been less than a day since the last bug fix to his update code and one of those bugs just a few days ago was SERIOUS, I'm going to wait for others to experience the bleeding edge since there is no need to hurry.  The theoretical problem the update corrects does not occur until 2024.

To view this discussion on the web visit https://groups.google.com/d/msgid/quadstick/f9e784bc-bb99-458b-84b9-16ad137bd776n%40googlegroups.com.