Skip to content

Security: KareemAksh/SPECTRA

Security

SECURITY.md

Security & Responsible Use

Spectra runs locally and controls your own keyboard backlight. To enable reactive mode it reads keyboard event devices (/dev/input/event*) via evdev — strictly to detect that a key was pressed (for the glow effect). It does not log keystrokes, store them, or send anything over the network.

Privacy

  • Reactive mode needs read access to input devices (granted by 99-spectra-kbd-input.rules). If you don't want this, skip that rule and use brightness control only.
  • No telemetry, no network calls.

Reporting a vulnerability

Found a security or privacy issue (e.g. an input-handling bug)? Please open a private report via GitHub Security Advisories ("Report a vulnerability" on the Security tab) instead of a public issue. Best-effort response; this is a volunteer project.

Rolling back system changes

sudo rm -f /etc/udev/rules.d/99-spectra-kbd-*.rules
sudo udevadm control --reload-rules && sudo udevadm trigger

There aren't any published security advisories