PingerPlot Files

Fixes from an outside review, and the elevated logon task retired.

On 1.4.x? PingerPlot offers this update by itself (or ⋯ → Check for updates): click Install and restart. Otherwise: PingerPlot-Setup.exe (github.com) (installs for your Windows user, no admin prompt) or PingerPlot-win64.zip (github.com) (portable). On Linux: pipx reinstall pingerplot. Not code-signed: Windows protected your PC → More info → Run anyway, and compare with SHA256SUMS.txt.

Fixed

• Your targets survive a restart. Changes are saved a second after you make them, and when Windows shuts down, not only when you hide or quit: an overnight Windows Update restart used to lose targets added or edited with the window open.
• The headless runner under pythonw.exe (the README's Task Scheduler line) no longer stops at its first status line, and a character the console can't show no longer stops it either.
• A portable update that fails part way puts the old version back completely, or says so in update.log. It checks for free space first.
• The mouse wheel scrolls on Linux, and a precision touchpad scrolls on Windows.
• A very long alert window no longer turns every alert off, and the reply timeout stops at 10 s.
• Start with Windows works for a copy installed with pip.
• The Events list keeps the last 1,000 events instead of growing forever.
• Infinity in settings.json can no longer stop the app opening.

Security and privacy

• The elevated logon task is retired. launch.ps1 -InstallAutostart started PingerPlot as administrator at every sign-in with no prompt, and other programs running as you could change what it did. Use Start with Windows, and run PingerPlot as administrator when you need full TCP/UDP traceroute. launch.ps1 -UninstallAutostart removes an old task.
• Map lookups send only internet-routable addresses. Carrier-NAT and Tailscale addresses (100.64.x.x) used to go to ipwho.is.
• The CSV export can't carry a spreadsheet formula from a loaded session, and now records DSCP and the source address.
• A webhook error no longer shows the URL's secret path.
• On Linux and macOS, settings.json is readable by you only.

The full list is in the CHANGELOG.