Sunday, 24 July 2016

How To Quickly Lock Your Keyboard And Mouse When Moving Away From The PC

These Windows tools will help you to lock your keyboard and mouse quickly when you are not around the PC

There are several methods such as setting up a local or Microsoft account to be able to rapidly lock the PC by pressing Win + L and unlock it with a password to stop your inquisitive friends or co-workers from spying on your Windows computer when you’re not around. Another method is by opting for third-party tools to quickly lock and unlock the keyboard and mouse while keeping the screen’s contents visible.
In this article, we show how you can without any effort do this with KeyboardLock, Child Lock and BlueLife KeyFreeze that are free to use.

KeyboardLock

You do not require to install this app. All you need to do is double-click the .exe file from the downloaded package to launch Keyboard Lock 
You have to enter a password to lock and unlock the keyboard and mouse. By default, the password is cake, but you can change it into anything of your choice. Click Start and just type the password to lock the PC, and type it again to unlock it. While the pointer can be moved in locked mode, but nothing occurs if you try to type something or click the mouse buttons.
Please note that KeyboardLock allows the Ctrl+Alt+Delete command to be activated, so someone can do this to access Task Manager and switch to open windows.

Child Lock

An icon in the systray is created by Child Lock at start-up, which has four buttons displayed in the main window. If you wish to automatically lock the application, click Auto Lock, if it hasn’t been active in the last 10 minutes. Double-click the tray icon of Child Lock and click Cancel in the main window, if you wish to cancel this task.
Click Lock to block the keyboard and mouse immediately or press Shift+Alt+End. While they are locked, any key press or mouse click will turn the mouse pointer into the prohibited sign.
Click Allow Only to allow only a few keys to be pressed: Space, PageUp and PageDown, or Click Block Win Ctrl to block only control keys, i.e. Ctrl, Alt and Win key. This mode starts a few seconds after clicking its button to give you time to choose a window to limit the buttons inside it. The mouse pointer cannot be moved in this mode.
Activate the Shift+Alt+Home key combination to unlock the keyboard and mouse. In the main app window, click Options to review the hotkeys for locking and unlocking, if you forget them. It’s not possible to change them.
Please note that Child Lock allows the Ctrl+Alt+Delete command to be activated (even if you trigger Block Win Ctrl), so someone can do this to access Task Manager and switch to open windows.

BlueLife KeyFreeze

Since BlueLife KeyFreeze isn’t enclosed in a setup kit, you can double-click the .exe file from the downloaded package to run the program. It gets integrated into the systray.
Right-click the tray icon to lock the keyboard and mouse, and choose Lock All Keys or press Ctrl + Alt + F. There’s a small interruption before locking, during which you can cancel the task.
You can lock only the keyboard or the mouse (right-click the tray icon and choose Lock Keyboard or Lock Mouse).
Press Ctrl + Alt + F to unlock the keyboard and mouse. If you want to make changes to this combination (Ctrl + Alt + any letter or number), right-click the tray icon, go to Options, click the menu next to Hotkey for lock/unlock: and select the preferred combo. You can also block mouse movement (clear the Allow mouse movement box) or Hide mouse pointer (tick this box). Once you’re done, click Apply Options to commit alterations.
After locking the devices with BlueLife KeyFreeze, if someone sends the Ctrl + Alt + Delete command, the computer gets locked instead.
Note: The apps mentioned above cannot stop anyone from pressing the power button on your computer to shut it down, thus losing any work that has not been saved, and switching it on again to gain access to your data unless Windows login is requested. Therefore, you should still create a local or Microsoft account to make sure that your PC is secure.

Pokémon Go - 6 Important things you must know

Pokémon GO
Pokémon GO launched just two weeks ago, and people have been getting crazy to catch 'em all.

Users, on an average, are spending more time engaged with the new Pokémon GO app than any other apps like Snapchat.

But, before downloading and playing Nintendo's new location-based augmented reality game, users are required to keep the following points in their minds:

1. Unofficial Pokémon GO app might contain Malware


Since Pokémon GO is currently available in only a few countries, many third-party gaming websites are offering tutorials due to huge interest surrounding the app, recommending users to download the APK from a non-Google Play link.

Users need to "side-load" the malicious app to install the APK by modifying their Android core security settings, which allows their device's OS to install apps from "untrusted sources."

However, researchers have discovered that many of these online tutorials are linked to malicious versions of the Pokémon GO app that install a backdoor, called DroidJack, on victim's phones, enabling hackers to compromise their device completely.


2. Protect Privacy While Using Pokémon GO


If you're playing Pokémon GO, then forget about your privacy.

Since this augmented reality game requires your GPS location and a data connection (either WiFi or cellular data), you can not expect your privacy to be secured while playing this game.

However, still, users can avoid playing in locations where they do not want to be tracked.

Also, don't use your personal Gmail account to log in, as this links your personal information including your GPS location and Pokémon GO activity. Either use a burner Google account.

For this, create an all new Google account, with nothing in it, and use this account to sign into Pokémon GO as well as other apps that you may find doubtful.

Although the security hole has been patched, previous versions of Pokémon GO app required extensive permissions to your Google account, so make sure your app is up to date.


3. Beware of Pokémon GO-themed Malicious Apps on Google Play Store

Pokémon GO Google Play Store
Yes, malicious Pokémon Go apps have even made their ways into the official Google Play Store.

Researchers from popular antivirus firm ESET have spotted at least three fake Pokémon Go apps on the Google Play Store. Of them, the one titled "Pokemon Go Ultimate" posed the biggest threat to Android users.

Pokemon Go Ultimate renames itself "PI Network" and deliberately locks the screen of the victims’ devices immediately after being installed, rending the devices unusable.

The only ways to get the infected phone unlocked are to remove the device's battery or reboot the device via the Android Device Manager.

Even after restarting the device, the app removes itself from the device's app menu, but still continues to run in the background and silently clicks on porn advertisements in an attempt to generate ad revenue for its creators.

The worse: Researchers say that the malicious app is just one step away from being Ransomware.

Although Google has removed the fake Pokémon GO app, users who had already downloaded the app would need to uninstall PI Network manually through their device's application manager.

The rest of the two fraudulent Pokémon apps produced fake security messages in an attempt to trick users into paying for an antivirus service that actually does not exist.

Currently, all three apps seem to be removed from Google Play, but be on guard: more are likely to show up in the coming days.

So, before head out to catch 'em all, just make sure you are downloading the legitimate Pokémon Go app. Here're ESET's full advisory and security recommendations.

4. Go catch Pokémon, But Just Watch Out!

Go catch Pokémon
It's less than two weeks since the launch of Pokémon GO, and the Nintendo’s game is fueling public safety fears after the first major car crash in Auburn, New York.

Later it was revealed that a 28-year-old car driver was reportedly playing "Pokémon GO" and got distracted, thereby ran his vehicle off the road and crashed into a tree.

Another case reported by the San Diego Union-Tribune involved two men apparently playing Pokémon GO were rescued after falling off a 90-foot ocean bluff in California Wednesday afternoon.

The victims are fine, but that's not the point.

The point here is that do not put your or others lives in danger. Don't play the game while walking, driving and biking.

The Auburn Police Department has also released an advisory to remind drivers to use "common sense" while catching Pokémons and keep their eyes on the road at all times.

Here're some important points that players must keep in their minds:
  • Do not use the Pokémon GO app when you are operating a motor vehicle or bicycle.
  • Do not trespass onto private property when trying to catch a Pokemon.
  • Be aware of your surroundings when searching for Pokémon and do not just stare your phone without knowing hazards around you, like roadways, drop-offs, and waterways.
  • Always use caution when sharing your locations — strangers can see your location data.
  • Travel in groups in public/well lit areas.
In simple words: don't be a dumb crap; grow up!

5. Pokémon GO: Crimes, Robberies, Deaths & Other Problems

pokemon-warning.png
The game craze has been blamed for several robberies of distracted smartphone players.

Pokémon GO sends players out to capture the virtual Pokémon characters that are superimposed in parks, streets, stores as well as inappropriate locations like the Holocaust Memorial Museum, 9/11 Memorial, and Arlington National Cemetery, as reported by CNN.

Across the America, the gamers have been drawn down dark alleys and into dangerous neighborhoods in search of the Pokémon characters, only to be targeted by criminals.

So, Pokémon fans need to be a little more vigilant while playing the game, because your life and your money are more important to an imaginary character.

6. Pokémon GO Cheats, Hacks, Punishment and Bans


Since Pokémon GO has taken the world by storm with gamers of all ages joining in with the Pokémon catching fun, players are making use of Pokémon hack and cheats to catch Pokémons with fewer efforts.

This augmented reality game requires gamers to walk around homes, parks and local surroundings to find new Pokémon, as well as achieve goals like hatching incubating eggs.

One can find the most common Pokémon in the distance of 2km eggs, with the rarest ones in the 10km eggs. This means you are required to walk a lot if you want to advance in the game.

So, players are using tricks like placing their phones on a record player or tieing their phones with a fan in order to increase their walking distance in no time at all.

In fact, tech-savvy players are spoofing their GPS locations with rooted and jailbroken devices, so that they can catch Pokémon without physically going to locations where the imaginary characters are actually located.

However, before using these cheats, players should be aware of the fact that they can be banned for up to five hours from playing the game.

Even worse, cheaters are being punished by encountering wild Pokémon characters, which runs away from them.

Although the company, as of now, is not imposing harsher punishments or bans, some rumors claim that Niantic could completely block players after a certain number of temporary bans.

So, we advise users to walk and find their favorite Pokémon characters as guided by the map.

Play the game the right way. Gotta catch 'em all!

Uh-Oh! Pokémon GO grants itself 'Full Access' to your Google Account — Fix It NOW

pokemon-go-game-ios-android-download
Nintendo's new location-based augmented reality game Pokémon GO has been making rounds since its launch just a few days ago. People are so excited to catch 'em all that brought Nintendo's market-value gains to $7.5 Billion (£5.8 Billion) in just two days – the highest surge since 1983.

Due to the huge interest surrounding Pokémon GO, even hackers are using the game's popularity to distribute malicious versions of Pokémon GO that could install DroidJack malware on Android phones, allowing them to compromise user's devices completely.

However, the latest threat is related to the privacy concerns raised about the iOS version of the official Pokémon GO app.

Pokémon GO – A Huge Security Risk


Adam Reeve labeled the game "malware," saying that Pokémon GO is a "huge security risk" as the game, for some reason, grants itself "full account access" to your Google account when you sign into the app via Google on iPhone or iPad.

Yes, you heard that right: Full Account Access.

Any app, according to Google's own support page, that granted Full account access, can:
"See and modify nearly all information in your Google Account (but it can't change your password, delete your account, or pay with Google Wallet on your behalf)."
What exactly this means is quite unclear, but Reeve claimed that the Nintendo's Pokémon GO – developed by Niantic – can now:
  • Read all your email.
  • Send email on your behalf.
  • Access your Google Drive documents (including deleting them).
  • Look at your search history as well as Maps navigation history.
  • Access your private photos stored in Google Photos.
  • And a whole lot more.
Although Reeve, who reported the issue on his Tumblr blog, said this issue appears to mostly affect iOS users, some Android users are reporting that their devices are also being affected.
Pokémon GO doesn't Intend, but has Power to look inside:

Game developer Niantic, who is behind the smash-hit game Pokémon GO, released a statement saying that it never intended for its game to get full access to your Google account and that the app hasn't accessed any user data beyond "basic profile information" such as your User ID and email address.

Niantic also said that the company is actively working on a fix to downgrade the permission.

"We recently discovered that the Pokémon GO account creation process on iOS erroneously requests full access permission for the user's Google account," Niantic said.
"Once we became aware of this error, we began working on a client-side fix to request permission for only basic Google profile information, in line with the data that we actually access."
Well, agreed that Pokémon GO didn't intend to look inside your Gmail inbox, but there is no doubt that the app was initially granted wildcard access to users Google accounts.

How to Revoke Pokémon GO's Access to Google Account


In the meantime, gamers can revoke Pokémon GO's full account access to their Google account.

Here's how to revoke it:
  1. Head onto your Google account permission page and look for Pokémon GO.
  2. Select Pokémon GO Release and click "REMOVE" button to revoke full account access.
  3. Launch Pokémon GO on your device and confirm it still works.
This will immediately revoke the Pokémon GO app's access to your Google account, but the downside is that users may lose their game data.

Another simplest approach is to use a burner Google account. For this, create an all new Google account, with nothing in it, and use this account to sign into Pokémon GO as well as other apps that you may find doubtful.

Downloading Pokémon GO Game for Android? Beware! It Could be Malicious.

Download-Pokémon-GO-Game-for-Android
"Pokémon Go" has become the hottest iPhone and Android game to hit the market in forever with enormous popularity and massive social impact. The app has taken the world by storm since its launch this week.

Nintendo's new location-based augmented reality game allows players to catch Pokémon in the real life using their device's camera and is currently only officially available in the United States, New Zealand, UK and Australia.

On an average, users are spending twice the amount of time engaged with the new Pokémon Go app than on apps like Snapchat. In fact Pokémon Go is experiencing massive server overload in just few days of launch.

Due to the huge interest surrounding Pokémon Go, many gaming and tutorial websites have offered tutorials recommending users to download the APK from a non-Google Play link.

In order to download the APK, users are required to "side-load" the malicious app by modifying their Android core security settings, allowing their device's OS to install apps from "untrusted sources."

Pokémon Go is Installing DroidJack Malware


Security researchers have warned users that many of these online tutorials are linked to malicious versions of the Pokémon Go app that install a backdoor on Android phones, enabling hackers to compromise a user's device completely.

Security firm Proofpoint has discovered the malicious app, or APK, that has been infected with DroidJack– a Remote Access Tool (RAT) that can hack any Android device by opening a silent backdoor for hackers.

Just less than 3 days after Nintendo initially released the game in Australia and New Zealand on July 4, the malicious app was uploaded to an online malware detection repository.

Since Android core security settings normally prevent the installation of untrusted third-party apps from "unknown sources," side-loading should have never been done by a user.

"This is an extremely risky practice and can easily lead users to install malicious apps on their own mobile devices," researchers at Proofpoint wrote in a blog post. "Should an individual download an APK [Android application package] from a third-party that has been infected with a backdoor, like the one we discovered, their device would then be compromised."

Here's How to Prevent Yourself


Fortunately, there are several ways to check if you have downloaded the malicious version of the Pokémon Go app.

The infected version of the Pokémon Go app would have been granted more system permissions, so one way to differ between the two is to compare the permissions of your app to those of the legitimate one.

To do so, Go to the Settings → Apps → Pokemon GO and check the game's permissions.

If you find that the game has asked for permissions like directly call phone numbers, edit and read your SMSes, record audio, read Web history, modify and read your contacts, read and write call logs, and change network connectivity, then you should uninstall the game right away, since it is infected with DroidJack.

You can also compare the game's SHA-1 hash – a long string of characters used to verify if a file was infected with or modified by a malicious third-party – to make sure the game matches the hash of the legitimate version.

The Bottom Line:


Instead of downloading available applications from unknown third party stores, wait for the Pokémon Go app to launch in your country.

However, downloading apps from third parties do not always end up with malware or viruses, but it certainly ups the risk. So, it's the best way to wait in order to avoid compromising your device and the networks it accesses.