TechnoTron

WhatsApp: will highlight the conversations that interest you - "TechnoTron"

2017-05-06T20:34:00.000-05:00

The app will remain fixed at the top of those conversations that the user choose

WhatsApp is the messaging app the world's most popular and, for this reason, any planned improvement or change in the functionality have a huge impact in the market. The who is developing the development team at this time can be the most useful in the day-to-day, and can significantly improve the experience of use: it is a way to keep fixed at the top of those conversations that the user chooses. This interesting feature is already available in the beta 2.17.163 and 163 of the Android version of the messaging application.

WHATSAPP, APP, APK, SMARTPHONES

To all happens to us: as the hours go by, we accumulate messages of different conversations; some useful, others are simple reminders that we will be able to delete. The problem arises derived from one's own hierarchical structure of the organization of the messages: the platform placed on top of the last message received or sent without any type of weighting by use or frequency. This chronological organization has its logic, but buries conversations to the user are frequently asked or just important.

The drawback is that then the user has to spend time in begin to slide on the screen the successive conversations to the chat regularly with your spouse, parents, or friends. Another alternative to give with these messages is not better: use the search engine; a solution slow and heavy loses a lot of time. But WhatsApp seems to have listened to the users by incorporating a simple function that is going to greatly facilitate the use of the tool: the possibility of fixing on the upper part of certain conversations.

You can set a maximum of three conversations at the top

The majority of the users account with a series of conversations that are repeated over time: family, friends, work... These groups or contacts deserve special treatment because they are the most used and from now on you will be able to place permanently at the top. To do this, simply press on an ongoing basis in the conversation (either an individual contact or group) until you see the icon of a pushpin. Clicking on it will cause that conversation to stay fixed at the top regardless of the messages that are coming or to be written later.

The application has been established, all in all, a limitation: you can set a maximum of three conversations at the top. The app will be estimated that with this measure covers the bulk of the needs of the users by its experience. To remove the pin, simply repeat the process but in reverse (press and hold until the icon appears and turn it off). The new function would normally bulk the rest of the users in a relatively short period of time.

WHATSAPP, APP, APK, SMARTPHONES

From where to download applications in the Apk and how to know if you are safe - "TechnoTron"

2017-05-04T20:48:00.000-05:00

We offer four sites from which to download apps Apk reliable and, in addition, the way of making sure that these files do not pose problems.

The store of Google applications is the best site from which to download Android apps. Well-organized, with hundreds of thousands of choices, full of quality... There is everything, of course, but everything is there. Or almost everything, that there are notable exceptions that can not be downloaded from the official Android app store.

Today we will make a compilation with the four sites recommended for download apps in Apk safely. And, as one can never ensure full, we offer you the way of analyzing the files to your smartphone, keep it away from malware. Let's get started.

APK, APP, ANDROID

Apk Mirror

The site header when you're looking for the free apps that are not available officially in some countries. Hosting service owned by Android Police, with Apk Mirror, you have the best repository for applications Apk. And you can use this website to make downgrade of your applications in the case of the update received do not you like it.

Uptodown

Another web reference in the file download Apk is Uptodown. Huge collection of free applications with change log and the maximum security for the installation. They even have Android app that will keep you up-to-date applications in Apk download. I must!

APKPure

Here, also collect the free Android apps, registering the previous versions so that you can install the way you want. Offers a catalog huge with tops of downloads and popularity. It also has application for Android to access APKPure as if a normal store is involved.

F-Droid

This is an application repository which is characterized by offer Apk files free that meet a premise: all applications are open-source. To access F-Droid just download its Apk and install it. Launch it on your smartphone, lets update the list of repositories and download the app that you want. There is an excessive number of software, but it is safe.

How to know if the Apk of your phone are safe

All of the sites that we have discussed allow the download of Apks legally and without any risks: your files are safe. But what if you wanted to ensure the Apk that you already had on your phone? There are ways to.

One of the safest and most well-known is VirusTotal. Service purchased by Google, scans all types of files to see if they are infected, Apks included. You can use the web to do this (going up each application) or download the following application to perform a full scan of the device. The app is an adaptation of the web services.

As we always say, it is best not to download apps in Apk if you do not know with certainty its origin. With the four sites that you should not have any problems; although extreme precautions and monitors the double of what vigilarías with the Google Play Store.

APK

Unpatched Wordpress: Allows Hackers To change The Password Of Administrator - "TechnoTron"

2017-05-04T16:53:00.000-05:00

WordPress, the most popular CMS in the world, is vulnerable to a logical vulnerability that could allow a remote attacker to reset targeted users’ password under certain circumstances.

The vulnerability (CVE-2017-8295) becomes even more dangerous after knowing that it affects all versions of WordPress — including the latest 4.7.4 version.

The WordPress flaw was discovered by Polish security researcher Dawid Golunski of Legal Hackers last year in July and reported it to the WordPress security team, who decided to ignore this issue, leaving millions of websites vulnerable.

WORDPRESS, UNPATCHED, HACKERS

"This issue has been reported to WordPress security team multiple times with the first report sent back in July 2016. It was reported both directly via security contact email, as well as via HackerOne website," Golunski wrote in an advisory published today. "As there has been no progress, in this case, this advisory is finally released to the public without an official patch."

Golunski is the same researcher who discovered a critical vulnerability in the popular open source PHPMailer libraries that allowed malicious actors to remotely execute arbitrary code in the context of the web server and compromise the target web application.

The vulnerability lies in the way WordPress processes the password reset request, for the user it has been initiated.

In general, when a user requests to reset his/her password through forgot password option, WordPress immediately generates a unique secret code and sends it to user’s email ID already stored in the database.

What's the Vulnerability?

While sending this email, WordPress uses a variable called SERVER_NAME to obtain the hostname of a server to set values of the From/Return-Path fields.

Here, "From" refers to the email address of the sender and "Return-Path" refers to the email address where 'bounce-back' emails should be delivered in the case of failure in the delivery for some reason.

According to Golunski, an attacker can send a spoofed HTTP request with a predefined custom hostname value (for example attacker-mxserver.com), while initiating password reset process for a targeted admin user.

Since the hostname in the malicious HTTP request is an attacker-controlled domain, the From and Return-Path fields in the password reset email will be modified to include an email ID associated with the attacker's domain, i.e. wordpress@attacker-mxserver.com, instead of wordpress@victim-domain.com.

"Because of the modified HOST header, the SERVER_NAME will be set to the hostname of attacker's choice. As a result, Wordpress will pass the following headers and email body to the /usr/bin/sendmail wrapper," Golunski says.

Don't get confused here: You should note that the password reset email will be delivered to victim's email address only, but since the From and Return-Path fields now point to attacker's email ID, the attacker can also receive reset code under following scenarios:

If, in case, the victim replies to that email, it will be delivered to attacker email ID (mentioned in 'From' field), containing a password reset link in the message history.
If, for some reason, victim's email server is down, the password reset email will automatically bounce-back to the email address mentioned in "Return-Path" field, which points to the attacker's inbox.
In another possible scenario, to forcefully retrieve bounce-back email, the attacker can perform a DDoS attack against the victim's email server or send a large number of emails, so that the victim's email account can no longer receive any email.

"The CVE-2017-8295 attack could potentially be carried out both with user interaction (the user hitting the 'reply' button scenario), or without user interaction (spam victim's mailbox to exceed their storage quota)," Golunski told The Hacker News in an email.

For obvious reason, this is not a sure shot method, but in the case of targeted attacks, sophisticated hackers can manage to exploit this flaw successfully.

Another notable fact on which successful exploitation of this flaw depends is that, even if WordPress website is flawed, not all web servers allow an attacker to modify hostname via SERVER_NAME header, including WordPress hosted on any shared servers.

"SERVER_NAME server header can be manipulated on default configurations of Apache Web server (most common WordPress deployment) via HOST header of an HTTP request," Golunski says.

Since the vulnerability has now been publically disclosed with no patch available from the popular CMS company, WordPress admins are advised to update their server configuration to enable UseCanonicalName to enforce static/predefined SERVER_NAME value.

WORDPRESS, UNPATCHED, HACKERS

INFO: THE HACKER NEWS

Android to iPhone without losing data in the process - "TechnoTron"

2017-05-03T17:16:00.000-05:00

In the automatic mode and manual.

Change of phone is something we've all done it at some point, and what we're not going to fight sooner or later. Well for work reasons, because we spoil our smartphone, or because it has come out a new model that we can not stop to think, at some point we will have to change phone and migrate the data from one to another.

Brand new phone is nice, but if you move data and files from the older device to the new is not as fun, it is rather heavy and not always ends well. And if it is already difficult to move data between devices of the same platform, do it between different platforms can be a challenge.

Today, we look at the different ways we have of moving from Android to iPhone. There are beaches for all tastes, and choosing one method or the other depends on whether we want to continue with our previous services of Google, move to the Apple ecosystem, or to stay half way.
IPHONE, ANDROID, SMARTPHONES

The simplest option

Apple has a app for Android that we can use to migrate data from our Android device to our new iPhone.

Is called to Transfer it to iOS, works on Android 4.0 or later and is compatible with iOS 9 and later, and iPhone 5 or later, iPad 4th generation and later, iPad mini 2nd generation and later and iPod touch 6th generation.

Before you start, Apple recommends that you connect both devices to the current.

From the iPhone, we have to turn it on for the first time and follow the instructions. When you get to Applications and data, you have to press in to Transfer data from Android.

If we had already set up, we will have to restore it from Settings > General > Reset. This will erase the data that you've added, so if you don't want to lose them you'll have to perform the migration from Android to iOS manually as we will see later.

From Android, we have to open the Transfer app to the iOS and follow the instructions until you reach to Find the code. You'll need to enter the numbers which you easily configure your iPhone or iPad.

In the following menu, you can choose what content to copy and which to leave in your Android. The app transfers contacts, messages, photos, videos, web bookmarks, email accounts and calendars. Also be copied free apps that have iOS version. The payment will appear on the wish list of iTunes if you want to buy later.

At the end, you'll just have to finish the initial setup process of your iPhone or iPad and you'll be able to check whether it has copied all the information that you wanted to recover from your Android.

Move content at hand

Although Transferring to iOS is a very handy tool, and simplifies the step from Android to iOS, we can't always use it, either because our iPhone already contains files and data, or because we prefer manual control of the process.

If we were Android users, surely use Google services, so we'll just set up those services on our iPhone or iPad.

In the case of mail, contacts and calendars, we have to go to Settings > Mail and set up our Gmail account, which includes mail, contacts, calendars and notes. IOS apps relevant to show the previous content.

In addition, you can set up your social networks, installing apps official, such as Facebook, Twitter, Instagram or WhatsApp.

To install the applications that you have saved in your Android you'll have to see what apps you have installed and if they are available in the App Store from your iPhone or iPad.

With documents, you can keep them in Google Drive and edit them with the Google toolbar or use Pages, Numbers and Keynote, and subsequently save a copy in iCloud Drive.

Photos and videos are the content that will occupy a more and more regret losing its sentimental value. The ideal is to save that content in your space in Google Drive or Google Photos.

Another option is to copy all that content to your computer and then sync it with your iPhone or iPad via iTunes or upload it to iCloud.

The same thing happens with the music. If you use a streaming service there is no problem, you just need to install the official mobile app for iOS. The songs stored in your Android you will have to copy them to your computer and sync them with iTunes. The same thing happens with ebooks.

You will find more information in the help page of Apple.

IPHONE, ANDROID, SMARTPHONES

move from iPhone to Android with your data safe and sound - "TechnoTron"

2017-05-03T15:09:00.000-05:00

In the automatic mode and manual

As we have seen recently, making the leap from Android to iPhone is something that can be done in several ways and according to our needs.

The same thing happens in the reverse process. If you have recently purchased an Android phone and you want to abandon your old iPhone, downgrade from iPhone to Android is a matter of a few steps, a bit of patience and a little more.

Either Samsung, Huawei, Xiaomi or LG, your Android smartphone is prepared for that amounts a large part of the content of your iPhone. Let's see how.

ANDROID, IPHONE, SMARTPHONE

The simplest option

Google knows that there are iPhone users who make the leap to Android. This is why its Google Drive app for iOS lets you export content to have it available on your Android in a few steps.

Google Drive serves as a file store, office suite with apps dedicated (Docs - Documents, Sheets - Sheets, and Slides - Presentations) and also as a tool to switch from iPhone to Android.

In particular, you have to download the app on your iPhone and sign in with your ID from Google, the same that you will use in your Android device.

From Menu > Settings > backup you can choose which items to upload to Drive then download them automatically on your Android. Google recommends that you use WiFi connection, obviously, because it is possible that satures your data plan mobile if you save many files and information on your iPhone.

Basically, Google Drive, copy your data associated with Google services, such as contacts, calendar events, photos and videos.

Transfer to hand

It is possible that with Google Drive you don't have enough to jump from iPhone to Android and need more steps to move your information.

If you use Google services such as Gmail, Calendar, own Drive, or Keep, among many others, you will just have to do anything more than install apps to Android, on a case that does not come by default in your Android smartphone.

But if you use iPhone with the tools or services themselves, it is possible that you will have to change. Apple focuses on its own platform so if you are a user of iCloud, Pages, Keynote or Numbers, you will not be able to use it on your Android. You have the web version, but is impractical in mobile screens. The only app from Apple available in Android is Apple Music.

The solution is to move the content from iCloud or your device to your computer and from there to your Android device, or use services such as Drive, OneDrive or Dropbox that have official mobile app for iPhone and Android.

In the case of your email, calendar or contacts, you can set the user data and servers in the settings of Android to be available in the app by default mail, contacts, and events. Messages and previous events will be stored in your mail server or calendar.

Other elements such as calls, pre or SMS messages are saved in the SIM, but the imessages will be lost and the content of Notes you'll have to export it to hand, from within the app or from the website of iCloud.

The favorites of Safari or Firefox and saved passwords you can synchronize them by downloading Chrome for iOS and activating the option to Sync favorites.

In terms of the apps, games and their settings, it is inevitable to make the change by hand, that is to say, to see what apps you had installed on your iPhone and search for equivalents or alternatives in Google Play.

ANDROID, IPHONE

Are we alone against ransomware? No more ransom - "TechnoTron"

2017-05-02T19:33:00.000-05:00

Three key points: Precaution, prevention, and not to respond to extortion

Imagine back home, put the key in the lock and verify that you can't open the door. In it there hung a paper on which you are being asked an amount of money to change to provide the key that opens the new lock that someone has installed in the door of your house.

So does the ransomware, one of the dangers of digital that more grows and the more popularity you have among the friends of the alien. An example, the ransomware Cryptowall v3 has tried to infect more than 400,000 computers, only in its third version, with an approximate cost of 631 million dollars in damages.

Unlike a virus, trojan horse or adware, steal your data, slow down your computer-or what they directly, the ransomware has as purpose to keep the access to your files or to your computer. What the price to regain control? Pay a certain amount to the author of the software infectious.

Previously we have spoken of examples of ransomware such as CryptoLocker and the increasing attacks on individuals and companies with this kind of hacking tools.

RASOMWARE, VIRUS

Anyone can be a victim

The ransomware can affect individuals and large companies or groups. A recent analysis of McAfee identifies three major groups of victims of this kind of threats.

The most important, hospitals and government offices. The reason? In many cases with very little computer security and networks involve the infection of tens of computers, which affects important services and sensitive information. On the other hand, can disburse the payment that is required with more ease than a particular.

Another possible group of potential victims are the users of mobile phones, and is that it is increasingly common to have a mobile device instead of a computer.

Easy to create

Why ransomware is so popular? Mainly because anyone can develop it, send it to a mailing list, to infect more computers and to obtain an economic benefit with the minimum effort.

There are on the internet tools to build your own ransomware

As with viruses and trojans, there are on the internet tools to build your own ransomware, in some cases as easy to use as you follow a few instructions and mark the desired option.

But unlike the first, where the benefit is not at all clear (to steal data, maybe you can sell it or not), in the case of this type of malware, to get something to change is very simple, both as to infect the data of someone willing to pay to recover them.

On the other hand, create a false account to receive a payment through one of the many digital services or through the mail is easier than years ago. What is more, in many cases are asked directly for the payment by criptomonedas as Bitcoin or similar.

A difficult problem to fix

While a virus, a worm or any other malware it can detect and delete so that your computer back to its normal functioning, the nature of the ransomware makes it a little more difficult to overcome.

The ransomware is based on the encryption of files, so that without the key or the original software that encrypted your files, it is very difficult to decrypt them to come back to retrieve them again. Hence many victims to pay what is asked of them.

Without the key or the original software that encrypted your files, it is very difficult to decrypt them to come back to retrieve them

you must start by preventing it. Our computer will not get infected on her own, so we must riding with eye when you open an email unknown, you open a file from an anonymous source or clicking on a link that we do not know its origin.

On the one hand and caution on the other, prevention. Those who want to infect our computer or mobile device with ransomware want to hijack our data and files. What would be the solution? Keep them handy by using backups, on an external disk and/or in the cloud.

What if we are victims of the ransomware? First, do not indulge in extortion. As we saw in this article there are already solutions to many of the infections by ransomware today.

In addition, the security firms are beginning to take an interest in this problem and launched initiatives such as No more ransom.

The union makes the force

The project No more ransom was born before the need to offer solutions to victims of ransomware.

This portal is provided free of charge and without commitment with tools with which to decrypt files taken hostage by ransomwares as popular as Chimera, Wildfire or Teslacrypt. Behind are two great security as Kaspersky and Intel Security / McAfee, in addition to Europol and the cooperation of Amazon and Barracuda.

If you go to the tools section of decryption, you'll see that the list of ransomware that is currently available is extensive. Almost 40 families, at the time of writing this article, with its different variants.

Each tool is downloadable individually and has its own guide for using it properly. Taking a look you will see that have been created by security firms known as Kaspersky, Avast, or the Intel Security / McAfee.

In case you cannot find the right tool, you can facilitate the project No more ransom a sample of the ransomware which infected your computer.

From the section Crypto Sheriff you can upload a couple of files encrypted together with the link or email that you have sent the perpetrators of the ransomware. Responsible for No more ransom analyse the material in search of a solution and/or will the relevant authorities give the responsible.

As a sign of the importance of ransomware, a piece of information: the first day that No More ransom was online received over 2.6 million visits.

RASOMWARE, VIRUS

The best tools to discover fake pictures - "TechnoTron"

2017-05-02T17:24:00.000-05:00

it will be difficult that you'll take the hair

The photo retouching has been around since the first photograph. There has always been photographers who, with more or less success, have altered an image to give it more light, to remove nuisances, or to include others that embelleceran the composition.

In analog photography, it was enough to let the photograph to reveal more or less time or crop an image, place it on top of the other and get another copy for edits and montages to hand.

With the entry of Photoshop on our computers, the digital retouching of photographs is easier than ever and with a little skill and the suitable tutorial, or simply by trial and error, anyone can retouch a picture, and that is natural, or give the hit.

However, in internet it is common to find fake images, photomontages that are trying to make us believe but which turns out to be a photo altered to fool us or convince us of something.

Some are coarse and rough, and look to the league, but other mounts are very well made and seem credible to the point disseminated in a viral way via social networking.

How to avoid to take us the hair with false images? Not enough to have a good eye, sometimes we have to go to tools to detect these fakes or photomontages. Let's look at some of them.

PHOTO, FAKE

Forensically

We started with Forensically, a web-tool specifically designed for the detection of alterations in a photograph.

Its list of features allow you to view digital touch-ups on any image you upload to this page: magnifying glass, detection of the feature clone of Photoshop, noise analysis, access to the metadata and tags of geolocation...

Up to a total of twelve ways to detect false images to view items that have been added or altered later.

Googlr Images

With Forensically you can perform an in-depth analysis of a photography, but maybe don't want to mess so much.

Another way to detect fake is to find the original file that gave rise to the counterfeiting or retouching.

Previously we have spoken of the engines to reverse, such as Google Images, that allows you to find images similar to one that we provide as proof.

That is to say, instead of looking for a combination of words, you upload an image or provide a link, and Google Images will show approximate results that you can filter with the available options.

It is likely that, with Google Images, des with the original image or just the page where it was originally published that photo. So unmont counterfeit.

TinEye

Google Images, upload a photo and TinEye will show you results that are identical or approximate.

In this way you'll see if the photo you have in your hands is original, has been retouched or just be published out of context.

FotoForensics

Returning to the analysis tools, FotoForensics looking aspects retouched an image that you upload in JPEG format, or PNG, or you know your link online.

FotoForensics is more simple than Forensically. Is restricted to show metadata, analyze the image noise and JPEG compression.

The images that you upload are public and you can share the result of the analysis via Twitter, Facebook, Google+, Pinterest, or Reddit. A quick and practical way to unmask false images and share the outcome with other internet users.

Find EXIF Data

With Find EXIF Data you'll get the EXIF metadata of your photos. You only have to indicate the link where the image is hosted.

What are the EXIF data? This information indicates when and how did the photography, what camera or device, and other technical data such as GPS position, time of exposure, if used, or no Flash, ISO speed and aperture, etc, In some cases, even see if the image has been touched up with other software.

Image Edited?

What has been edited your image? This question will makes you Image Edited?, another handy online service that analyzes a photograph and gives you the EXIF data of the image for which you choose.

As in the previous case, it's up to you to interpret the data and decide whether there is or is not a retouching in photography.

Izitru

To finish, Izitru, the service where you upload your photographs and detector of fake images.

So on the one hand you can upload images and share them from a link and, on the other, you can analyze JPEG photos to discern if this is a frame-up or the picture is as pulled out with the camera.

Unlike the previous services, Izitru takes his time to perform the analysis. At the end you will display your results indicating the level of credibility of the image.

While Izitru not particular exactly what tests you performed, tends to be quite accurate, showing when and where you took the picture with accuracy.

PHOTO, FAKE

Online privacy: erase your trail vs. leaving a false trail - "TechnoTron"

2017-05-02T14:54:00.001-05:00

What is the best way to protect the information that we generate on the Internet?

It is a recurring theme. The online privacy. We are not always aware of it, of how our personal data or our browsing habits are exposed on the Internet.

Each bit time is again the debate, especially when a company has a breach of security, and passwords or information from hundreds of users appear in forums or news groups whose purpose is to sell data to the highest bidder.

Recently, the protection of online privacy has become to the fore by the controversial decision of the House of Representatives of the united States, that in the past month of march passed a law that will allow the telecommunications companies (or ISPS) to market with the information of the internet users.

What does this mean? That anyone, individual or company, can buy from the suppliers of u.s. Internet data of their customers without their consent. What data? Search history, downloaded apps, what devices they use to connect, for how long, etc

SOFTWARE, PRIVACY, INTERNET

Privacy, a sensitive issue

If you think about it. One thing is that since your computer access to certain content on the Internet and then delete the trace by emptying the search history and browsing, clearing cookies, etc, But your Internet provider has that information even if you're browsing with safe mode or incognito mode.

Before this law, in the united States Internet service providers could only access the information of their clients with your prior approval. Now you don't need.

This law sets a precedent anything but reassuring to the user and gives to think if it will spread to other countries

If you live outside the united States you're safe. Your provider, in principle, does not share your information generated as a client. And, on the other hand, this law does not affect services with headquarters in the US such as Facebook, Google or Twitter.

Be that as it may, this act sets a precedent for anything but reassuring to the user and gives to think if it will spread to other countries by imitation. Have access to the data of Internet users is very appealing, because it allows to fine tune the aim with the advertising campaigns and with the launch of new products.

In the wake of this news comes a big question: how can we protect our privacy online? How to stop our ISP or telecommunications provider keep a record of our habits and uses of the internet and then sell?

Do silence or noise?

There are two ways of approaching the protection of privacy online. Hide our habits, keeping us in silence or on the contrary, leave false trails of our navigation, making all the noise possible so that the resulting data are useless.

Normally, when we talk about privacy we provide solutions focused to not show our data. For example, we recommend the use of the HTTPS protocol because it encrypts the exchange of information between our browser and the page that we access.

Another common solution is to recommend the use of VPN. Browsers such as Opera integrate this function and there are so many VPN solutions, free and paid, to surf anonymously from our computer or from mobile devices.

In connection with the VPN technology, it is also usually recommend the use of browsers with emphasis on privacy. The most popular is Tor but there are other options to consider, such as Epic, Privacy, Comodo Dragon or Avira Scout.

All of these measures, of course, have to be accompanied by common sense, especially when we talk about social networks, where if we want to protect our privacy we should share as little as possible.

Make noise to confuse

As I said before, the silence tends to be the main solution given by the security experts when the need arises to protect our privacy online. But on the other hand, there is an alternative solution that also makes sense: to leave a false trail.

When it comes to clear the contents of a hard disk, we reformat that drive once. But when we use more advanced systems like professional tools, these tend to rewrite data on the disk. Is more, the Department of Energy of the united States has, as standard, to rewrite three times to delete data in units of storage-magnetic, as is the case.

Following the pattern of the erasing of hard drives, why not saturate it with false instead of prevent them from spreading?

With this idea comes the Internet Noise, it is a site that, after pressing a button, it takes control of your browser to open new tabs with content random.

The purpose of the Internet Noise is to protest the commercialization of the navigation data of internet users americans.

Their manager, Dan Schultz, cautions that his tool does not we will bring more security to our online privacy. In any case despistará to advertisers, to alter our habit of navigation.

Is more, the own Dan Schultz recommended to protect our online privacy, with HTTPS Everywhere, Privacy Badger, Tor and/or VPN.

Basically you have to press on, Make some noise to activate the Internet Noise, let it do its work while you do not need to use your computer, and when you need to access it again, you can stop the tool with the button Stop the noise.

The usefulness or not of the Internet Noise will depend on the sophistication of the analysis tools of the habits of the companies interested in trends and personal preferences. Do you visit random pages I despiste or the algorithms that are used are able to distinguish between a page open by accident and a logical navigation?

SOFTWARE, PRIVACY, INTERNET

Malware directed against Polish banks and institutions in Latin america - "TechnoTron"

2017-05-02T02:45:00.000-05:00

Recently, news surfaced of attacks on Polish banks in the site security of Poland ZaufanaTrzeciaStrona.pl (translated to English here). The impact of the attacks described with drama, calling it “the most serious”, and the initial reports were confirmed by two articles from Symantec and BAE Systems. The institutions affected are of various nationalities all over the world and spread to Latin america, including Mexico and Uruguay, with the goals of high-profile in the viewer of the attackers.

There are many interesting aspects of these attacks, starting with their targets, going through your vector of and commitment to the specific functionalities of the malicious executables are used. While the first two axes were examined in detail, binary malicious involved did not attract much attention until the time. The purpose of this article is to provide technical details of this malware for now is very poorly documented.

MALWARE

Distribution channel

As mentioned in the news portal of Poland, the threat is sent with stealth via an attack watering hole, thanks to which a trusted site that was compromised redirected to a fraudulent page that hides an exploit. In the case of the attacks of poles, the starting point was the official site of Komisja Nadzoru Finansowego (the Financial Supervision Authority of Poland):

However, our data indicated that the site of the authority, equivalent in Mexico, the National Banking Commission and Values, it was also redirects to malicious identical; unfortunately, the information published by services of web crawl or for the institution itself had neither confirmed nor mentioned it. According to our records, the redirects came from this site page:

Phase 1: Dropper

If the exploit kit manages to malware infection desired, the payload malicious (a console application, 64-bit) runs on the computer of the victim. Unlike the dropper reported by BAE Systems, this program expects one of three arguments: -l, -e, or - (section 2 in the following figure). While the argument to-l has the same meaning, the remaining two are required to extract binary the next stage from the resources (section 4 in the figure) and to automatically start one of them as a service (section 5):

In section 5 the above figure, the dropper is changing the configuration of a system service to do the malicious payload as a service. The service is configured from the services control manager to start automatically during the system startup; to do so, you need administrator privileges.

Unlike the subsequent phases, in the first one, the threat is not hidden very carefully. It even contains detailed statements that provide information on the state of the execution (in this case, related to the extraction of encrypted resources; however, the debug information as the original names of functions is not present).

The dropper used in a load API dynamically instead of having Windows functions in your import table, which is very well explained in the report by Novetta “Operation Blockbuster” about the Lazarus Group, on page 34. Section 3 of the figure above shows a wrapper of this functionality, which is a system library after the other.

It seems that the attackers denote the second phase as “loader” and the third, which contains the main function of the malware, such as “module”. The loader is decryption, while the module only extracts and runs as well as it is. To reduce their visibility during the forensics analysis, the files take to borrow its time of creation of the shlwapi.dll system. An important feature of the encryption algorithm used is that is it is a chain of encryption similar to RC-4, fairly recent called Spritz. There are already available implementations in C and Python Spritz, and correspond to the following disassembled code for the dropper:

Fase 2: Loader

There are more indicators of the intention to preserve the low profile of the threat. The loader is protected by a packer commercial called the Enigma Protector, and we realized that the module is stored, encrypted, waiting for the loader decipher and release. After a closer look at this protection, we found that there was a not registered copy of Enigma v. 1.31 for 64-bit. It was just as we expected, since malware creators with this level of capacity would not make a mistake as basic as leaving your identity at potential risk of being discovered thanks to the use of a copy, duly registered. However, it is not uncommon for criminals to take advantage of an application-filtered or pirated if it is available.

The attackers that attempt to build a large botnet, in general, do not use packers trade because a good proportion of the manufacturers ' anti-malware detect them in a generic way. Therefore, restrict the potential size of the botnet. But in the case of a targeted attack, using such protection has advantages. An obvious one is that the reconstruction of the original binary, that is, to determine how it was before entering in the process of camouflage, it is almost never easy.

The impression sometimes is that the only machines with 64-bit Windows can be a target of this threat is wrong, since it also drew a variant for 32-bit computers of some of the institutions affected. Although it has the same general structure, this last is not a mere recompilation of the first, but has slight differences: the phases of dropper and loader are combined into one, it uses RC4 encryption in classic and not Spritz, and the phase module is stored in the registry instead of in the file system. In addition, the version of the protector Enigma applied was 3.7, with a single developer license, and apparently was used to protect the binary on January 11, 2017.

Fase 3: Módule

The third and final stage module is relatively large (~730 KB), which contains the main functions of the malware communicated with the C&C and receive orders from the operators. In addition, injected himself in all the sessions started in the Windows system compromised.

The following screenshot shows the situation after loading the module in the tool for disassembly, IDA Pro. The top bar shows the various parts of the binary: the sections of code in blue, and the sections of data in grey and yellow. The difference between the parties-and blue-celestial is that the latter represent the code statically linked to the existing libraries. In addition to the C run-time usual, we identify the link of a library file transfer multi-protocol open source call libcurl (version 7.47.1, published in the February 8, 2016), along with bits of code from projects like OpenSSL and XUnzip. The effect of colors on the bar is not generated in an automatic way: in this case, we had to explicitly marking parts that we consider as code of the linked library and import all of the names of the functions. The sections in blue represent the code written by the attackers..

There is only a URL encrypted housed in the module. The communication is encrypted, but we do not log any because the remote server did not respond at the time of analysis. The module supports quite a few commands; more than enough are of the that characterize him as a Remote Access Trojan (RAT). The dictionary of commands is as follows: “SLEP”, “HIBN”, “DRIV”, “DIR”, “DIRP”, “CHDR”, “RUN”, “RUNX”, “DEL”, “WIPE”, “MOVE”, “FTIM”, “NEWF”, “DOWN”, “ZDWN”, “UPLD”, “PVEW”, “PKIL”, “CMDL”, “DIE”, “GCFG”, “SCFG”, “TCON”, “PEEX”, “PEIN”. Many are self-explanatory (“SLEP” is similar to the English “sleep” for “sleep”, “PKIL” is to kill a process, “UPLD” is the exfiltration of information, “DOWN” is to download, “THE” is to erase a file, etc). It is possible that the original functions of libcurl have been customized to fit the needs of the attackers. Anyway, libcurl is a large project with hundreds of contributors, tens of thousands of lines of code and hundreds of options. The inspection and the accurate analysis of the connection are in process.

Kits of tools, similar to Lazarus

Researchers from BAE Systems have to say about the dropper 32-bit protected with Enigma: “once unpacked it runs a variant of known malware, which was sent as part of the kit of tools of the group Lazarus...”. In addition, Symantec states: “Some strings of code views in the malware used to share common aspects with the code of the malware used by the threat group known as Lazarus”. It is also possible to find a connection in the report by Novetta, such as the already mentioned dynamic loading of API. All these signs lead us to describe the properties crucial a tool kit similar to Lazarus in the following way:

Malware multi-stage running in cascade
The initial phase is a console application that expects at least one parameter
Loaded WINAPIs in a dynamic way
It uses RC4 or similar with a long key for decryption of the next phase
The following phases are libraries linked in dynamically loaded as service with the start type SERVICE_AUTO_START (administrator privileges are required for this action)

Our records show activity of various malware like Lazarus in-the-wild recently. However, in order to provide a clearer picture of the case, we need time to gather more relevant information.

A discovery strange

During our research, we found another interesting sample that belongs to the same family of malware. A console application waiting for four parameters call fdsvc.exe (2), which runs in cascade (1). In addition, decrypts the next phase using RC4 with a key of 32 bytes (4). You do not have the last two properties. On the other hand, injects the payload in all of the sessions in the course of Windows; the payload has libcurl v. 7.49.1 linked in statically. What makes this sample particularly interesting is the way in which the final stage parses commands from the operators, who use the Russian language with translit, a method of coding of the cyrillic alphabet with letters of the Latin.

But we must be careful with the attribution. The language used could be a false trail, mainly because the creators of malware usually implemented commands through numbers or shortcuts in English. Having a command of twelve letters is quite impractical.

Conclusion

Taking into account the tricks in the code, we venture to say that this is not a re-use of existing code long before these attacks on Polish banks, nor a project discontinued and forgotten. In fact, we observed malware that looks like this example in the last few weeks.

The attackers behind this threat they know well what they are doing, by what the teams response to incidents of financial institutions and other high-profile organizations will not be able to rest fully in the near future. To tell you the truth, that is your work today: I suffer nights without rest!

MALWARE

Presentations on your web page: insérts in a few steps - "TechnoTron"

2017-05-01T16:24:00.003-05:00

Desde OneDrive, iCloud, SlideShare, Google Drive...

Presentations are a very powerful tool to explain complex topics in a graphical way and understandable by anyone.

Leaving aside the PowerPoints of kittens who for years filled the inboxes of many of us, a presentation is the ideal solution for a work meeting, a class, institute, or university and even for your web page.

Thanks to the versatility of the current web pages, embed presentations in your website is a no-brainer and accounts with different options to carry it out. Let's look at the most recommended.

PRESENTATIONS, WEBSITE, INTERNET

With PowerPoint

Speaking of presentations is talk of Microsoft PowerPoint, the tool of creation of presentations that gave the name to the same.

With the time it has been renewed by adding new functions, and one of them is the possibility of adding PowerPoint presentations on your web page so that you can view it from your web browser, online, without the need to download it.

To do this you have to follow a few steps relatively simple. First, you have to save the document PowerPoint in a public folder on OneDrive, the service of online storage of Microsoft. When you save it in the folder public you can share it on social networks, or, in this case, integrate it into your page or blog.

From OneDrive, you'll get the HTML tag in the PowerPoint. You can get it from the page of OneDrive > shared folder > click on the information icon of the presentation > Share > Embed.

The HTML tag is the only thing that you need to add to your page or blog. When you load the page where is the code you'll see the presentation in its own frame. It is compatible with WordPress, Blogger, TypePad and most of the environments of web creation.

With Keynote

Apple also allows you to integrate presentations created with Keynote on your web page. The only requirement is that the presentation is saved on your iCloud space, which offers 5 GB free.

To make this possible you will need to open the presentation from the Keynote, from macOS or from iOS, and from working you'll be able to get the link and specify who can access the presentation and if you can only view it or also you give permission to edit it. For this article we only need it to be visible. You can optionally include a password.

The HTML code that you will get is compatible with WordPress and similar. You will only have to insert it through the button of the embedded content.

With SlideShare

PowerPoint and Keynote are the primary tools of the desktop with which to create presentations, but on the internet you will find many other solutions, the less popular but equally professionals and sometimes free.

In terms of share presentations on your web page, there are also different options, such as SlideShare, which since 2012 belongs to LinkedIn.

With SlideShare you can upload files of different formats, such as presentations (PDF, ODP, PPT, PPS, PPTX, PPTS), documents (PDF, DOC, DOCX, RTF, ODT, TXT) and graphics in PDF, up to a maximum of 300 MB per file. It also allows you to insert videos from YouTube and files stored in Dropbox, Drive, Box, OneDrive or Gmail.

The process is as simple as clicking on Upload and drag and drop the file or files. You can then configure them one by one.

SlideShare displays presentations in its own page and has buttons to share it on Facebook, Twitter, LinkedIn, Google+ and codes for any web page, and another specific to WordPress.

With Google Drive

Along with PowerPoint and Keynote, Google Drive has become a very practical option to create text documents, spreadsheets, and, of course, presentations.

If in Drive guards presentations in their native format, or in PowerPoint or Keynote, you can integrate it into your web page easily.

The process is as simple as opening the document or presentation, and from File > Publish to the Web... a window will open from which you publish it with just the push of the Publish button.

In exchange you'll get a link that anyone can view the document from Google Drive and an iframe code to embed it on your website.

At any time you can cancel the publication by opening the presentation again in Google Drive, and from the same menu File > Publish to the Web.

PRESENTATIONS, WEBSITE, INTERNET

Malware on macOS, discover one of the most sophisticated to date and you can spy on you - "TechnoTron"

2017-05-01T12:58:00.000-05:00

MAC, MALWARE

If in the last hours has been alerted of a phishing campaign impersonating emails-official Apple to get user accounts, now security researchers from Check Point have published the existence of a new malware that can infect Mac computers.

"There is a new malware that attacks directly to macOS, the umpteenth reason to be wary of attachments to emails from strangers."

His name is Dok and portray it as the first trojan to large-scale that affects macOS, the desktop operating system of Apple.

Dok, the malware on the Mac that intercepts your connection

This is not the first time that it is discovered malicious software on Mac, it is not that there are no viruses on Mac, is that an attacker has more chances of success if you develop malware for Windows by the enormous potential of affected.

The last case discovered by Check Point is of special interest because it is affecting users in Europe, and arrives via an attached file in an email. What is striking about the malware Dok is that it is digitally signed with a valid certificate from Apple developer, therefore is able to be installed in the system without jumping the security alarms of macOS. It is speculated that the certificate could have been stolen.

Once the malware is installed, it displays a permanent notification which indicates that there is a system update and asks for the password of administrator, enter it is you are giving privileges to the program to make changes without need to ask permission.

The result is that Dok is able to intercept the web traffic and therefore can eavesdrop on the data that the user shares such as passwords, emails and other private information even when you believe that you are using a connection encrypted and secure.

The researchers say they are one of the malicious programs more sophisticated than have been found for macOS and have already reported to Apple. What the method to avoid this? A classic: do not trust emails from strangers and, of course, much less open any possible attachments.

MAC, MALWARE

Women in cybersecurity: the change is coming, slowly but steadily - "TechnoTron"

2017-04-30T12:02:00.000-05:00

Many industries are working hard to equalize the gender disparity within their fields, and have good reasons for wanting to do so.

Not only companies with a more diverse workforce offers a playing field more obvious to the new recruits; there were studies that found that the places of work various are more profitable, productive and have higher levels of customer satisfaction.

These findings make the picture even more worrying for the industry of information security, in that only 11% of jobs in cybersecurity at the global level are occupied by women.

In an industry that is also facing a recruitment crisis (40,000 of the 128.000 positions that open annually in the united States remain vacant), it is evident that much remains to be done to address the gender gap in the cybersecurity and increase the levels of recruitment of the industry in general.

CYBERSECURITY, WOMEN, WORKS

A problem of image

Despite being, by definition, a modern industry and a vision for the future, the professions related to the safety and security continue to be dominated by men. And, as noted in the report of the Center for Cyber Security and Education, (ISC) on women in cyber security, it is expected that the gap in labour to reach 1.8 million people by 2022.

This is not a small problem, as he said in 2015 Lysa Myers, a researcher of security in ESET. Talking to WeLiveSecurity, expressed his concern that “there are still a handful women in the industry”, a fact that is partly attributed to an image problem within the technical industry.

“I think there is a stereotype, unfortunate about the technical jobs in which people spend day and night in a dark cellar,” he said. “But that is not the reality at all.”

Another of the reasons behind the gender gap and recruitment in general is the lack of understanding about the different roles covered by the umbrella of it security.

The possible careers and professions for men and women, are not always clear, nor are they known by all; few places offer an education in depth about computer to the students before the university, although the percentage of people who need to use computers in a competent manner is quickly approaching the 100%.

“But if not to be seen as a possible way for the children that show interest, we will lose the possibility of having your talent and may end up choosing careers more ‘traditional’ only because they knew they couldn't continue this way,” said Camilo Gutierrez, head of research at ESET Latin america, to analyze the need for reinventing education.

"THERE IS A STEREOTYPE, UNFORTUNATE ABOUT THE TECHNICAL WORK"

In search of balance

Fortunately, they have created several organizations and initiatives with the goal of achieving the balance. One of these initiatives is the Women in Cybersecurity Scholarship, a scholarship of $ 2,500 that ESET is awarded to women pursuing undergraduate studies and aspire to a career in cyber security in the united States.

“THE AWARD WAS INCREDIBLY USEFUL; IT VALIDATED MY CHOICE OF CAREER”

The winner of the last year, Chelsie Power, now works as an analyst of information security, in addition to studying for his Master's degree in Cybersecurity at Cal State University, San Marcos.

She said: “The award was incredibly useful as it paid for my books, materials, additional training, and some of the tuition expenses. Validated my career choice, giving me the confidence to continue developing my skills as an analyst of information security”.

And he added: “I Think that any field benefits of a diverse workforce to take advantage of broader perspectives, especially cyber security, where cyber threats and vectors of attack are becoming more sophisticated and creative”.

Other organisations which seek to restructure the balance and improve rates of recruitment include the National Center for Women in Information Technology, with headquarters in the united States, and Girls Who Code, which aims to educate and inspire girls in high school to make careers in computing.

While the general perception indicates that those who wish to pursue a career in cybersecurity need to have a background in technology, this is not necessarily the case; the own Lysa Myers began her career as a florist, became a receptionist and then began to gain experience in the laboratory of virus research of the company where he worked.

A report of 2015 written by Myers called Women in Federal Cybersecurity also revealed that several experts recognized in cybersecurity began their careers in various fields. Nothing is impossible.

What a sign of change?

"MORE PEOPLE ARE REALIZING HOW SOLID, SAFE, AND INTERESTING THAT THERE IS THIS RACE"

Although the percentage of women in work of cyber security is still low, there are some indications that the interest in cybersecurity as a career is starting to increase.

The Cyber Boot Camp of ESET, a program in which San Diego students receive five days of intense education in the art of defending computer systems, had an increase of female participation from 0% to 40% in three years.

Myers also believes that the interest in the sector is growing. Speaking in 2015, said: “More people are realizing how solid, secure and interesting that it is this career choice, and as more and more companies are realizing how crucial it is to computer security, there are many types of people dealing with many different aspects of the technology.”

CYBERSECURITY, WOMEN, WORKS

I turn on the light, and give me your passwords! False lantern hides on Google Play - "TechnoTron"

2017-04-30T02:17:00.000-05:00

A banking malware with the capabilities of screen lock was pointing to Android users, by pretending to be a application with function of flashlight available on Google Play. Unlike other banking trojans, which are a set of banking applications such as aim, this is able to adjust its functionality in a dynamic way.

In addition to providing the promised functionality of the flashlight, the threat, controlled in a remote way, comes with a variety of additional functions that are looking to steal banking credentials from victims. On the basis of the commands on your server of C&C, the trojan can display screens fake that mimic legitimate applications, block infected devices to hide the fraudulent activity, intercept SMS messages, and display notifications to false to avoid the double authentication.

The malware can affect all the versions of Android. Due to its dynamic nature, it may not be a limit to the apps lens; the threat gets HTML code based on the applications installed on the device of the victim and uses it to cover them with screens false then they are executed.

The trojan, detected by ESET as a Trojan.Android/Charger.B, climbed to the Google Play on the 30th of march and was installed for up to 5,000 unsuspecting users before being removed from the store, after the notice of ESET the 10 of April.

FAKE FLASHLIGHT, APP, SMARTPHONES, MALWARE, ANDROID, GOOGLE PLAY

How it operates?

Just installed and is running, the app requests permissions from device administrator. Users with Android 6.0 and later versions must, in addition, allow you to manually access and use the overlay on other applications. With the rights and permissions obtained, the application hides its icon and appears in the team only as a widget.

The payload is encrypted in the resources in the APK installed from Google Play, eluding detection of its malicious feature. This malicious payload is decrypted and executed when the victim opens the application.

First, the trojan registers the infected device in the server of the attacker. In addition to sending information to the computer and a list of the apps you have installed, the malware looks for to better know their victims, since they also attach a photo of yourself taken with the front camera of the device.

If the information submitted indicates that you are located in Russia, Ukraine or Belarus, the C&C instructs the malware to stop its activity, probably to avoid the persecution of the attackers in their own countries.

Depending on the applications they find on the infected computer, the C&C sends the activity to false in the form of HTML code in malicious, which is shown in WebView after which the victim is running one of the apps of the list of targets. A screen false overlaps the legitimate activity and asks for the details of the credit card of the user, or their access credentials for a particular banking application.

However, as we mentioned before, to define what banking applications are on the list of goals is complicated, since the HTML is requested varies depending on what applications are installed on the particular device. During our research, we have seen displays false for Commbank, NAB and Westpac Mobile Banking, but also for Facebook, WhatsApp, Instagram, and Google Play.

The credentials entered in the false forms are sent unencrypted to the server of C&C's attacker.

In terms of locking the device, we suspect that enters the scene when one extracts money from the bank accounts involved. Attackers can remotely lock the device with a screen fake that looks like a update, to hide the fraudulent activity and to ensure that victims do not interfere.

To communicate with the C&C, the trojan makes improper use of Firebase Cloud Messages (FCM); this is the first time that we see an Android malware uses this channel of communication.

As we investigate, the app is a modified version of Android/Charger, discovered initially by researchers from Check Point in January 2017. Unlike the first version, which extorsions its victims by locking their devices and demanding the payment of a ransom, the attackers behind the Charger now try their luck with phishing to obtain banking credentials, a development rare in the world of malware for Android.

With their capabilities of display screens login fake and lock computers, Android/Charger.B is also similar to the banking malware that we discovered and discuss in February. What makes this latest discovery more dangerous, however, is the fact that your goal may be updated dynamically, instead of being inserted in the code of the malware, which leaves open the possibility of future misuse.

Can infected your device? How do I clean it?

If you have recently downloaded an application of flashlight from Google Play, verify that it is not this trojan.

The malicious application can be found in Settings → applications Manager → Flashlight Widget

If well-found is simple, uninstall it it is not. The trojan seeks to avoid impeding the victims to turn off the device manager active, something that you need to remove the application. When trying to clear the rights, the pop-up screen will not until you change your mind and click the “activate” button back.

In that case, it can be removed by rebooting the computer in safe mode, which will allow you to follow these two steps to remove the app:

How to protect yourself

To avoid dealing with the consequences of mobile malware, prevention is always the key.

Whenever possible, opt for the stores application in official download apps. Although it is not foolproof, Google Play uses advanced mechanisms of security to avoid malware, which is not necessarily the case in alternative shops.

If you are in doubt about the installation of an application, it checks your popularity by the number of facilities, their qualifications and, what is more important, the content of the comments.

After you run any thing you have installed on your mobile device, pay attention to what permissions and rights requests. If an application requests permissions that don't seem appropriate for their function, such as the rights of device administrator for an app of flashlight, you might want to re-think your choice.

Last, but not least, use a solution of mobile security of good reputation to protect your device from the latest threats.

Sample analyzed

Package name Hash Detection
com.flashscary.widget CA04233F2D896A59B718E19B13E3510017420A6D Android/Charger.B

FAKE FLASHLIGHT, APP, SMARTPHONES, MALWARE, ANDROID, GOOGLE PLAY

Instagram: services to squeeze - "TechnoTron"

2017-04-29T23:57:00.000-05:00

"Statistics, scheduled posts, profiles influential..."

According to data of January 2017 Statista, Instagram is the seventh social network in number of users.

With more than 600 million instagramers, we will only make shadow Facebook (USA) and Qzone (China) and apps like WhatsApp, Messenger or the chinese QQ and WeChat.

Its importance is such that, in addition to the apps official, there is a whole ecosystem of applications designed to improve your photographs of face-to publish them on Instagram.

On the website you will also find services online to Instagram, pages that provide features absent in Instagram to improve your mind, better manage your images and posts, or even to gain followers.

Let's look at some of the services that are most recommended.

INSTAGRAM, SOCIAL NETWORKS, APP, SMARTPHONES, INTERNET, TRENDS

Crowdfire

We started with Crowdfire, a tool with which to analyze your account of Instagram, propose some goals and achieve them thanks to the analysis of your profile, your competition and your followers.

Serves both to Instagram to other social networks such as Facebook or Twitter and is meant for company accounts, if any one particular can use it in your benefit.

With Crowdfire you can promote your business or your person, find new followers and know what time of day your posts will have better reception with the help of their functions, many of them virtually automatic.

Later

You can't always take a photo and publish it at the moment. Or sometimes you have a choice of several photographs but do not want to see hit, and fall quickly into oblivion.

With Later you can schedule your posts on Instagram in the most suitable time and from your web browser, without the need to touch your phone.

Later, facilitates the programming of publications on a calendar, including text and tags. Account with basic editing functions and includes statistical information to know what's going in the publications and if your photos have had the expected success.

In addition to Instagram, Later serves for Facebook, Twitter and Pinterest.

SocialRank

Know your audience. The purpose of SocialRank is to know who follows you, organize your list of followers and thus make better decisions when posting photos or tagging your images.

Among other things you'll be able to know where to find your audience, what their interests are and who are your followers more influential.

Websta

Websta is another one of those online services for Instagram that will give you additional information to make better decisions when publishing your photos.

With Websta you'll get statistical data, you'll be able to see users, labels and popular brands, manage your followers and customize your profile to make it more attractive.

Vibbi

Instagram is a good place to share and save your photos and videos, but what happens if you lose your files and want to recover them?

Vibbi is a service that allows you to download your photos, videos, and posts from Instagram to save a copy on your computer.

With Vibbi you can retrieve your own content or accounts that you follow, because it does not require registration.

Picodash

In other words, Picodash is a Google for Instagram.

With this tool you'll be able to find and discover labels, followers, find interesting topics, filter users by place of publication, and find pictures and videos that inspire you to improve your account or profile.

In particular, Picodash allows you to search by label, location on the map and name of user.

Statusbrew

We end this review of online services for Instagram with Statusbrew, a page with which to sift through your list of followers.

In particular, it analyzes your account and it shows you followers influential Instagram that maybe you might be interested to follow and that follow you.

In addition, it offers very practical information to your audience, such as thematic preferences, from where it will connect to Instagram, in what language you speak or write, etc.

INSTAGRAM, SOCIAL NETWORKS, APP, SMARTPHONES, INTERNET, TRENDS

Chrome: will warn you if you start to write on pages without encryption - "TechnoTron"

2017-04-29T17:47:00.000-05:00

"The new notice of Chrome on pages without encryption will prevent your data from being spied on."

The latest versions of Chrome have been focused on the fight against the HTTP and the empowerment of HTTPS; if you don't know the difference, basically, HTTPS provides an encrypted connection and reliable.

If a page uses HTTPS, we have some assurance that the communication can not be espiada easily by a third party; and also that we are connecting with the correct page and not a fake (the famous phishing).

However, HTTPS is not as expanded as you would like to Google. On some pages, directly it is because it is unnecessary because it does not transmit private information or require you to enter data; in others, it is because simply the administrator of the website has not done its job.

CHROME, BROWSERS, INTERNET, SAFE PAGES

New warning to Chrome in pages without encryption when writing

That's why, since a few versions, Chrome is alerting to the user, giving preference to pages that use HTTPS; and with version 62, will come more changes that will help us to avoid insecure pages.

The first change we will see when we go to write a page HTTP. At that time, the icon beside the URL will change and will show a message of “Not sure”.

Although HTTPS is usually used on pages that ask for personal data or passwords, Google thinks that all the data you share over the network should be private. Hence this notice, we will make it clear that what we write can be captured by a third party.

The incognito mode will alert you if your connection is not encrypted

The second change refers to the “incognito mode”, in which we can open a new window that does not record our history, or our cookies. Normally this mode is used when we don't want to leave a trace of our navigation.

That is why, from Chrome 62, the incognito mode will show the HTTP pages as unsafe. According to Google, this change comes because when we use the incognito mode, we have certain expectations of privacy.

The incognito mode does not protect our privacy against threats in the network, unlike what we might think; it only protects our privacy in the same computer. That is the reason of this notice, to users who don't think that when you use the incognito mode your connection is secure.

These changes are only a preview of what is to come in the near future, Chrome will display a warning “Not safe” on all pages to HTTP, regardless of whether they require to enter data.

CHROME, BROWSERS, INTERNET, SAFE PAGES

Chrome: marked as “not safe” most visited pages - "TechnoTron"

2017-04-29T11:25:00.000-05:00

"With version 56 will reach the notice of non-secure page in Chrome, but does it really was necessary on the part of Google?"

Google has a crusade against the webs unsafe; and is doing everything possible to eliminate them from the face of the Internet. It is not only that in the Google search pages safe have preference, is that the Chrome browser soon you will be informed when to enter into a non-secure page.

GOOGLE, BROWSERS, INTERNET, CHROME

HTTPS, the future of the web

When we talk about “safe” or “not safe”, basically we talk about if the website uses HTTPS or HTTP; they are two versions of the same protocol, the first encryption of the content. Here you can read more about the difference between HTTP and HTTPS.

HTTPS is a must for pages with login or that show personal data; not only encrypts data, but also verifies that the identity of the website is correct by using certificates.

Unfortunately, HTTPS is not as widely adopted as we would like; Google thinks the same, and is taking measures in this regard.

For a start, in the next version 56 we will begin to see a notice of non-secure page in Chrome. The notice will only appear on the websites we ask for information such as the password or credit card without a secure HTTPS connection.

What is the notice of non-secure page in Chrome

However, Google has been very clear: the ultimate goal is for all pages that use HTTP are marked as non-secure. We do not yet have specific date for this change, but now that the first HTTP pages have been marked as non-secure, it is matter of time to happen the same with the rest.

Something extreme for many web administrators; to consider that the websites that do not treat data the users need not invest in the added security of HTTPS. On the other hand, everyone knows that the future of the web passes through HTTPS.

This is not the first time that Chrome gets into the controversy of HTTPS. In Chrome 46 implemented new security indicators that are marked “not safe” to HTTPS pages that carried part of the contents by HTTP (such as ads or parts of the web).

Chrome 56 is now available in beta version; it is therefore more likely to be available in stable version in the next few weeks.

GOOGLE, BROWSERS, INTERNET, CHROME

How to retrieve and format a SD card or microSD corrupted - "TechnoTron"

2017-04-27T20:53:00.000-05:00

The price at which we can find memories SD and microSD cards for our smartphones, camera, or projects with a Raspberri Pi, it is not surprising that we have numerous at home. However it is products are not exempt from faults, and more regularly than we would like, if we are not careful, it is likely that at some point we find that it is not possible to read or access data from a microSD card or corrupted SD.

In that case it is worth knowing that often we will be able to recover a microSD card to continue using it, and even saving the data it contained. In this guide we will explain to you how to do it.

MICRO SD, SD, RECOVERY DATES, FORMAT

My SD card or microSD does not work, what do I do?

An SD memory card or microSD us of failure depends on many circumstances. It can be the sum of intensive use (all have a life cycle of maximum after which failures are "admissible") and not very good quality of the memory chips inside, due to improper use, extreme temperatures or software failure.

If it is our case, there are a number of steps we can follow to recover a card even without losing the data it contained. We act one way or the other will largely depend on the device on which the card has stopped working or error.

Card is not recognized by the smarpthone

If we use microSD cards in our smartphone as a convenient way to transfer large files, such as backup image or for expanding the internal memory, at some point we might find the warning that the card cannot be read.

The solution proposed by the operating system of this phone is the formatting. This action usually will retrieve the card for us to continue using it without problem except that the failure is by factory default.

But even if you have nothing of value in it, it should make you peer a few minutes and try to fix it in another way, since the smartphone there are hardly any way alternatives to avoid the formatting and therefore the loss of data.

In this case, as well as when a camera or other device does not recognize the format of an SD card or microSD, there is to continue to try to recover it in a PC, which is always the most recommended. Once you get the card in the slot or the corresponding port on the PC, there are several situations that we can find.

The PC cannot open the SD card or microSD

If when you insert a microSD card (with adapter) or the SD in the computer, it still does not work, we must first make sure that it is not a fault of the PC itself or the reader/adapter that we've used. Will test it in another computer, if it is possible, and if the error continues, we will act. It is also advantageous to find the drivers for the adapter or card reader if that were the problem and had to update them so that the card is recognized perfectly by the operating system.

"The decision to format completely a memory card that does not work is the last that we have to take. It is advisable not to rush and to try different solutions that may prevent that total loss of data"

Without resorting still to specific software, we started trying to meet and solve the problem with the help of the operating system itself.

If the card is recognized by the operating system but can't open it (it asks to format), in the first place, we should try to get it back by telling the operating system that he himself will look for the error, recognize it, and if possible, solve it. Use the right button to start a search of the problem and the application of the solution directly. If after this process the card already let us access your content, congratulations.

If, despite this check is still not solved the problem with the SD card or microSD card, we will use the CHKDSK utility of Windows. We have to open the command Prompt and type chkdsk x:\f where the letter x must be replaced by the letter that the operating system has assigned to our card.

If this process has recovered the card, it is recommended to perform a backup of the information that we need and already yes to format the card to continue using it.

It could also happen that the result of the check of the unit for part of the operating system would result in different errors. In this situation there are already to pass to try to recover the information contained in the card before proceeding to format the card, as we explain later.

On Mac the process is very similar, with the option of First Aid within Disk Utility.

The PC does not recognize the SD card or microSD

What if the operating system does not recognize the card? In this case a first step we can take is to search for the card in device manager and give us a letter. If we do, we will be able to apply the steps and processes above to retrieve the contents of the SD or microSD.

If all of the above has not worked, as we can only one step and requires third-party software.

How to recover data and photos from a damaged card

If the card you have is a damaged contains information of great importance, usually with photos that do not want to lose, we can try to retrieve that information before moving on to the formatting the same for "resurrecting".

For this task we will need some specific software. There are numerous solutions, both free and paid. A couple of recommendations would be Recuva, which is payment in your Pro version, and ZAR. The latter has a specific option to be able to save media information of SD and microSD cards.

Once the data is retrieved (or if there is no more remedy), we will proceed to format the card with the option of each operating system in particular. It is appropriate that we perform this step if the card has given us error, whether we have been able to recover it as if it did not.

Some tips to the SD card or microSD will not be marred

In addition to choose to products of proven quality, there are a number of tips or recommendations that you may have in mind to try to minimize the risks of our SD card or microSD end up damaged and we have to apply the above steps to recover it and be able to continue using it.

Avoid extreme temperatures or carry it in any way. Better protected to avoid damage.

Ten partner cards to specific gadgets specific. Do not share in what possible cards with gadgets of different types or brands because it could cause problems with the different software of each one of them.

Remove the card only when you are sure that it is not in use, and best if the camera, for example, is turned off.

MICRO SD, SD, RECOVERY DATES, FORMAT

Smart TV: turn your tv, buying guide of set-top boxes - "TechnoTron"

2017-04-27T18:38:00.000-05:00

How is your Smart TV dreamed of? For years the various manufacturers of televisions have been looking for to provide extra functions and applications to their best models. By the way, there have been attempts individual, partnerships with giants such as Google and in the last year, a true battle of operating systems advanced.

Despite these attempts, it is more usual to make it more advanced to a tv and have, for example, full playback of local content or streaming services using the applications, you still connect an external device and to multiply the options of the tv regardless of the model or brand of tv that we have.

SMART TV, TECHNOLOGY, TV, TRENDS

Today the options on the market are very numerous, powerful, and different enough for there to be enough doubt at the time of choosing the model that best fit what we seek. We must analyze the main products and set-top boxes on the market and offer our buying guide of set-top boxes to get a Smart TV to our liking.

SMART TV BOX

Chromecast

Simple, powerful and quite affordable. This could be a perfect definition of the Chromecast, one of the most successful product in the market to convert our TV into a Smart TV.

It is manufactured by Google and is already on its second generation. It is basically a stick that we connect to one of the HDMI ports of the tv (we also need to feed it via its microUSB port) and we get a direct link, simple, and pretty full between our smartphone (or the Chrome browser of our computer) and the tv. Simply select the application and content and cast it to the tv with a single click.

CHROMECAST

Strengths: very cheap, does not occupy space, we can take you comfortably from one side to the other and is very simple to set up and use.

Weaknesses: what you can do with it happens exclusively by the smartphone or the Chrome browser of your computer. And you'll only be able to send content from supported apps. Its fluidity depends on the quality of your WiFi connection from home.

Price: 39 euros at Fnac.

Apple TV

After years of waiting, the streamer of content Apple has improved in its last version to be much more powerful thanks to the arrival of native applications to Apple TV. Its users have the advantage of a huge ecosystem and quality of many of the main applications that you want to use into a Smart TV.

The new Apple TV, as of fourth generation, remains closed to the playback of local content directly from an external memory, but it is perfectly integrated between the world of products of the company (we can duplicate the screen of smartphones or tablets) and the voice assistant Siri becomes even more powerful, intuitive interface.

Its strong points are: ecosystem of applications, integration with Apple products, interface, game play controls, bluetooth and Siri.

Weaknesses: Without expansion ports, can't play content from external storage, directly, without content support UHD.

Price: 179 euros in the Cort English.

Nexus Player

One of the candidates to conquer the living room tv is Android with a version for Smart TV. With the Nexus Player we can bring that experience to any tv with an HDMI input for only 99 euros. As it happens with the Apple TV, here the users of services and Google apps will be in your field.

Despite the fact that we can install applications from Google Play, not all, of the dependence of multimedia with respect to streaming services is almost total, so that in this section by now is nothing more than a Chromecast more full but without excessive advantages (one of them is the wizard of voice) that justify the price increase. We are not facing a player of content that we can connect an external hard drive and move forward, but in streaming.

Strengths: design, integration with Google services such as Youtube or your app store, remote control included.

Weaknesses: internal memory fair, native apps limited, port microUSB OTG not easy to use.

Price: 99 euros

Roku 4

More than 2500 channels of on-demand content is what it promises to put in your tv model Roku more full, 4. It's compact, powerful, with integration with the smartphone, and a direct interface. In addition allows by means of a channel own the playback of content from USB drives directly, as well as via DLNA.

The good details of a specialist in reproduction of content are noticed in things like the remote, with buttons for direct access to services, the output of the headphones or the button on the Roku 4 to locate the control when we lost him.

Its strong points: there are different models to choose from (prices and features very spacious), the remote controls are complete and very practical, are almost all services and streaming channels and VOD that matter.

Weaknesses: their main markets are the US and Uk, the interface may appear to be less attractive than that of rivals.

Price: $ 130

Fire TV

Amazon, which has its service of on-demand content, also has a streamer of content that makes it more advanced to your tv. Is one of the most powerful in the market, compatible with content 4K.

Its strong points: integration of streaming services, power, there is a version in stick more affordable (but more limited), and quality of applications and games compatible.

Weaknesses: limited market USE (especially if you're a Premium user of Amazon), expensive for what it offers.

Price: $ 100

Sticks HDMI with Android

One of the devices most sought after these recent times are the sticks HDMI with Android. With them it is possible to convert a tv set either on a Smart TV based on Android, but with applications, interface and operation is identical to that we have in an Android smartphone or tablet.

Here it is important to look at the connectivity, and see what protocol support sending content are supported. Some of the most outstanding models are the Rikomagic MK902 for 100 euros or the Floureon MK808B for about 50 euros.

Its strong points: variety of applications for multimedia playback, connectivity, games Android.

Weaknesses: interface and applications that are not adapted for use in a television in their vast majority, need to control for a better interaction.

Price: from 40 euros.

Consoles

If you are a gamer will surely have the console always connected to the tv. The next-generation models focus part of their appeal in the entertainment, and the Xbox One, tuned TDT included, is the student advanced. Netflix, TED, Skype, Twitch, Youtube, Xbox Video, or RTVE a la carte are some of the services and applications that complement the playback of local content.

You can also use your PS4 for Sony to make more advanced your tv. Going a step behind the model of Microsoft, but includes some of the main protagonists of the video-on-demand (Wuaki.tv, Youtube, TotalChannel, Clan ...) and applications such as Plex.

Its strong points are: interface, powerful wizards and voice.

Weaknesses: dependence of the short-ecosystem of applications, use of the remote console.

Price: 329 €

Qnap TAS-268

The combination of different solutions playback connected via DLNA with a NAS is one of the most common to have the contents of the letter directly into our tv. What if the same NAS can serve as a player and even use Android apps?

The latest NAS from Qnap, the TAS-268, does precisely that. This server combines the operating systems QTS and Android, so we can use it as a NAS classic and powerful, but also as a media player with support for content 4k, and above all as an element where to execute Android applications that you can install directly from our Google Play account.

Its strong points: a device for several uses powerful, capacity up to 2 TB, connectivity, good design.

Its weak points: the functions of Smart TV are dependent on Android apps that are not optimized for use on a tv, it requires remote control or keyboard.

Price: 250 euros

Raspberri Pi

In the case that your idea of Smart TV mainly include access to local content and a media player using streaming services but from your computer, there are different solutions that can be useful to you.

The most affordable, compact, and interesting for its possibilities it is a Raspberri Pi. With Kodi you can have not only a media player, very complete but a Smart TV with the help of additives, including mirroring of our smartphone (PiCast).

Strengths: potential to convert the device into what you want, size, scaling options and a price.

Weaknesses: requires expertise to install add-ons and focuses too much on the multimedia playback.

Price: 66 euros (full pack with case and card)

The best options face-to-face

Focusing on the players/streamers of the content more complete, and that approach way faithful to what we understand by Smart TV, I leave you with a table summary:

WIFI	ETHERNET	INTEGRATION WITH SMARTPHONE	MEMORY INTERNAL	DEVICE EXTERNAL	APLICATIONS NATIVE	VOICE	UHD	COMMAND	PRICE
CHROMECAST	Wifi ac	No	Sí	No	No	No	No	No	No	39 euros
APPLE TV	Wifi ac	Sí	Sí	32/64 GB	No	Sí	Sí	No	Sí	179/222 euros
NEXUS PLAYER	Wifi ac	no	Sí	8 GB	No	Sí	Sí	No	Sí	99 euros
ROKU 4	Wifi ac	Sí	Sí	No*	USB	Sí*	Sí	Sí	Sí	130 dólares
FIRE TV	Wifi ac	Sí	No	8 GB	microSD	Sí*	Sí	Sí	Sí	100 dólares
STICK ANDROID	Wifi n	No	Sí	8 GB	USB	Sí	No	No	No	50 euros

KING OF APP: Learn how to create a app for Android or iPhone in minutes - "TechnoTron"

2017-04-24T17:18:00.000-05:00

The process is practically automatic

APP, SMARTPHONES, ANDROID, IPHONE, KING OF APP

We have seen on many occasions how the technology provides us with the day-to-day in many areas. Both the hardware and software evolve for tasks that years ago were complex they are within the reach of anyone.

An example, of which I have spoken previously, it is the task of creating an app for the Android, iPhone or another platform. To start, create prototypes, interactive and functional, it is possible to directly from the browser.

The same thing happens with the design, creation and publication of a mobile application in full by templates and modules scheduled to run from minute one. We have seen examples such as Windows App Studio, Microsoft, or AppsBuilder.

Today we're going to talk about King of App, another example that does that program already is not a prerequisite to have your own mobile application. In a few minutes and following the on-screen instructions, you'll be able to create an app for Android or iPhone, ready to be published in Google Play or the App Store.

King of App, which already has a name that is remarkable, bills itself as “WordPress for Apps”. WordPress is a CMS, a content management system that allows you to mount not only a blog if not a complete web page thanks to its ease of use and setup (almost automatic) and to his never ending list of plugins that add new functions.

So, King of App comes on to tell us that allows you to create an app for Android or iPhone in a way as simple as launching a blog or a web page using WordPress. Let's see if it is as well.

First steps

As is usual in the vast majority of online services, the first step is to give us high. We only have to indicate name, surname, e-mail address and a password to King of App.

After validating the e-mail through the message that we will receive, we can now get down to work.

Maybe because what I have just mentioned, when you start with King of App the interface design reminds me vaguely of WordPress. If you're familiar with this, to treat with King of App is a plus.

The authoring tool applications are based on templates. Some are free but others pay. You can perform a search by keyword or filter by templates most popular professional, the most punctuated, of cheapest to most expensive or vice versa, or filter by rating, author, or category.

We can start with a template free of charge for our first project. If in the future we look for something more complex that has already come virtually assembled, we can choose a template payout taking a look prior to the demonstration, available on all templates. And you will have an idea of what it is.

Modular design

Once we have chosen a template, you can customize it by changing the default settings and adding and organizing modules according to our needs.

Continuing with the simile of WordPress, from the left panel we have access to all the available options in King of App, as the functions and services of the app, how it will look, management options and a menu dedicated to the publication of the app in the official store.

The modules are fundamental pieces of our future application, because each module adds a function: to send an email, make a call, display a weather map, perform a search, display the calendar from Google, play videos or audios, display a menu of options...

Between the modules you will find the integration of popular services like Facebook, YouTube, Vimeo, Instagram, Google Maps, Google Calendar or Twitter, among others.

The same occurs with the services, although are focused on internal issues such as Google Analytics to get usage data of the users, sending notifications, and the integration of advertising.

In the section of Look and feel we can recreate ourselves with our own graphic material, and thus to give it a personal touch. On the other hand, we can choose themes pre-made. As with modules and templates, there is something for everyone, paid and free.

Ready to publish

Once the application is completed, we can already publish it. It is sufficient to fill the fields in the form that we find in Admin, required for Google Play or the App Store to see what is our app and if it meets the requirements of publication.

In the second place, we need to compile the app. While the process of creation is free, compile, and publish the resulting application requires an outlay.

Even so, it is appreciated that King of App allowed to save the application source code to compile it on our own and publish the app, resulting from our account.

That said, do you meet King of App on its promises? The short answer is yes. If you want to make a good app, you'll need more than a few minutes, but the tool complies with its mandate, facilitates virtually all the elements you need for your application and allows you to customize it to be more yours that King of App.

APP, SMARTPHONES, ANDROID, IPHONE, KING OF APP

Reading: How to choose the best books in Vacation - "TechnoTron"

2017-04-24T13:01:00.000-05:00

The free days are ideal to devote to the reading or to take it up again, but, as everything, requires some estimates. Reading is an activity that can give us great satisfaction and that literally immerses us in other worlds and states very interesting for our development. It is worth saying that choosing books for vacation or days off can be as simple as taking the reading we are doing in this moment. However, it can be worthwhile some of the tips that the more readers we have.

I would not choose difficult books or thick. We all have the same time, to read the trick is to invest in that and not on anything else, therefore, by default, involves saying no to many other occupations possible. On vacation, the book is competing, even more so, with other stimuli that can be more interesting, so if we take the task of reading a book that is hard, in a period of supposed rest, it will make us more uphill to the top of what is already normal.

BOOKS, E-BOOKS, READING, VACATION, TRENDS

Clear that, to choose well, it is more complicated to take only short books, keep in mind that a thousand pages of an exciting book can devour more easily than two-hundred of a complex text. The facility tends to be in the taste. Now, sometimes it is not right, there are books for every person, if one you liked at the beginning but then you are not able to follow, I would recommend to leave it and devote that time to another to make us enjoy it more, for something are vacation. “Life is too short to suffer reading bad books”, something it said in the sentence.

In the first place, depends on what you want to read, if you want to relax your mind and read something light, that would be good novels that are not very dense, or if you do not have a problem with that, and you can read books that are more complicated, such as essays. Depends on the type of reader that is: if you have tastes very defined or is read of all.

In the second place, it depends on where you go, if you are going to have time to read, either because the displacement itself gives to it and don't drive, either because you have decided that you are going to take the time to read during the trip wherever you are. In that sense, it would be desirable that it should be an idea of how many pages are estimated to read each day in order to know how many books to take. If they are paper, of course; if they are e-books, removes the problem. Although all modes have to select them.

The time and reading

On other occasions we have already talked about how to be a reader productive and how to read more and better. What is certain is that reading is an activity that requires some degree of personal commitment; more than anything for ourselves. This activity that is chosen for pure pleasure and concern intellectual yes we are required to dedicate time and, as they say my colleagues, sometimes give up some things. However, it is an activity that is very rewarding.

We must also remember that as readers we have rights and that it is much better to read something you enjoy than something that makes us suffer or we do not awaken any emotion. It is for this reason that choosing books for the holidays is a matter up seriously for any reader engaged, but not for this reason ceases to be something very fun.

The recommendations that I personally could add, go in the sense of not losing sight of the fun. Many people do not, we have several vacation periods or free time of the common activities, so that: why not plan it as if it were important? This may be the time to read that book that we have recommended, that other than for various reasons we have not been able to start.

"We must not lose sight of that read is pure fun."

We must also take into account that books are dense or topics that are very dark can lead to mood is not optimal for the holidays, and maybe end up abandoning the read. All of this account according to the tastes of each person and the way they live their readings.

Finally, don't limit yourself or you overdo it, calculate what you think you read and what you want to read and carry books in consequence. Do not carry more or less (of course, it is always rewarding to go out and buy books in other places). In the case of e-books, there's not so much a problem; however, read in this format requires the same commitment that the physical books.

Of course, the last and most important recommendation of all is that you have fun the most of both with your readings such as on your vacation and tell us of it by leaving your comments or by sharing this article on your social networks.

BOOKS, E-BOOKS, READING, VACATION, TRENDS

TVISO a search engine that finds movies and tv shows in more than 20 online sites - "TechnoTron"

2017-04-23T19:00:00.000-05:00

TVISO a search engine that finds movies and tv shows

There are two classes of consumers of television. Those who use their air and those who can adapt to it. The seconds are well-known: they turn on the tv and put the first channel where they find something interesting. And when are you going to give something that they like, they have to turn on the television to a time and specific days.

But it is increasingly common for the first profile, the those who put on the tv when we want to see something concrete, without waiting to be emitting at that time in one of the many current channels.

This profile of audiences to choose when and what you want to see, because in the present, if you've lost something, the little time you have available in one of the many streaming services, free or paid.

In the final analysis. The tv no longer is this device that we turn on and shows us linear content. Now we decide what we want to see and in what orde.

TVISO, TV GUIDE, SEARCH ENGINE

"Compatible with Movistar, Vodafone, Netflix, HBO, Amazon, YouTube, Film In..."

But a problem occurs. Each streaming service has its own search engine, so if you are interested in finding series or specific films, you'll have to go to each one of those services to see if they are available in such and such a catalog.

Previously we have spoken of JustWatch, a search engine that finds free content and pay-in Netflix, HBO, Wuaki, Atresplayer, and many other providers of series and movies over the internet.

Today we're going to see another seeker of this type, Tviso, an online search engine with mobile apps that will delight those who have multiple VOD services or that we follow dozens of series and we need to arrange our schedule for viewing.

A search engine of search engines

Tviso currently works for Spain, Mexico and the Uk, while it also allows you to view international content, more generic.

One of its advantages is that it gathers information from several sources: catalogs free (Atresplayer, TVE, DiscoveryMax, DisneyChannel, Flooxer and Mitele), catalogues of the payment (Movistar+, Vodafone TV, Amazon Prime Video, HBO, Netflix), rental services of movies and series such as Netflix, Wuaki, Google Play, iTunes and PlayStation Store, and even portals videos like YouTube, Vimeo or Dailymotion. So until more than 20 catalogues and services of streaming video.

In this way we avoid having to go to each one of the services in search of such series, or movie that you have wanted to see, but you don't know what a catalog is available.

The first section to visit in Tviso is the catalog. There you can find tv series, movies and documentaries using direct search, filtering by genre, year or the supplier, by limiting the results only to free content and sorting the list of series, films, and TV programs according to rating, the trend in the networks, or by most views (by other users of Tviso).

If, in addition, you're registered, you can refine your search based on your personal tastes according to what you have seen before.

Another possibility is to access the section for each type of content: series, films, and TV programs.

What happen today?

On the one hand, Tviso helps us to find series and movies to watch when we want, thanks to the many video stores and streaming services.

But on the other, offers us a guide of tv if we want to know what we can see in an hour, day, and channel specific.

If you don't get on well with the guide of your television or your cable television provider, it is possible that you will find in this guide a little help, as it allows you to filter by type of content (movies, series, sports, kids,...), what channels you want to see, etc, yes, for now it is limited to the day of the search, and the next day.

And if you are a fan series and you need to get organized to not forget any premiere, Tviso account with a calendar series.

From the calendar you will see what series and chapter are going to be brand new and what a day. In addition, you can view the calendar of premieres official (usually in the united States) and the premiere in your country (in pay-per-view, in open or in online catalogs).

More than a search engine

Tviso has its own space by way of the online magazine where you can find news, reviews or articles related to tv shows, movies, and television programs.

It also provides a comparator of online video clubs, if you have to choose and do not know if you subscribe to Netflix, HBO or Wuaki, for example. From there you will be able to access the specific brochures of each service and give you high.

And if you register, you can create a list of tv shows and movies view in order not to repeat, as well as a list of pending content view.

Tviso is accessible from your web page and also from its mobile applications for Android and iOS.

TVISO, TV GUIDE, SEARCH ENGINE

Yandex: the translator that gives a voice to minorities - "TechnoTron"

2017-04-23T14:32:00.000-05:00

Yandex: the translator that gives a voice to minorities

TRANSLATOR, INTERNET, YANDEX

While the Google Translator offers the possibility to translate more than a hundred languages, its competitor, Russian Yandex by now it has only 94. But unlike the us giant, the company's Russian computer gives the possibility of translating minority languages, and even includes the language elvish, sindar.

The service Yandex Translator has created a unique collection of languages that have an important cultural significance. Yandex launched its translator in 2011, back then the program only 'spoke' in three languages: Russian, Ukrainian and English.

Currently, Yandex Translator has become a polyglot. Since its 'birth' Yandex has learned many languages, including papiamento, a language spoken by about 300,000 people on the islands of Curaçao, Bonaire and Aruba, located near the coast of Venezuela.

The machine learn a language in two stages. First, it analyzes the 'core' of a language that consists of words, morphological features and syntactic that appear more often. To determine this 'core' will need a small text. For example, we use texts of the Bible or of the Koran since these two sacred books were translated to almost all the existing languages.

Second, the 'nucleus' is enriched with data from related languages that the translator 'speaks'. If two languages have vocabulary that is similar, the translator Yandex starts to use data from the same model lexicon.

If these languages have rules of inflection like, also used the same morphological model that in the related language that is already part of the list of Yandex.

According to the programmers of the company, the translation system has learned eight new languages in a year and a half: the Bashkir, mari-hills, yiddish, marathi, nepali, papiamento, the Uzbek and the sindarin.

The last language is artificial, created by the writer and a british philologist J. R. R. Tolkien for the race elf in his books about Middle Earth that has no language like it in the real world.

Tolkien in fact used models of different linguistic groups real by which Yandex in particular decided to use several models of the languages of the celtic as the irish, welsh and scottish gaelic, experts explain.

In addition, representatives of the computer company Russian state that one of the services used most frequently is the translation of the Latin.

The technology behind Yandex Translator allows you to learn any language so that it is likely that the users of the service soon to see even more languages in the list.

TRANSLATOR, INTERNET, YANDEX

WhatsApp: discover if you are spied on when using WhatsApp Web

2017-04-23T04:08:00.000-05:00

Index:
Prologue
1.- WhatsApp Web, a tool that is too quiet
2.- How to protect your account from WhatsApp so no one can spy on web

Prologue

"WhatsApp Web goes well to use the messaging on the computer, but it is easy to spy on another person if you are logged in the browser with your mobile phone. Avoid this."

The messaging application for excellence not only drag behind itself a huge popularity, a huge amount of controversy. Security, partnerships with Facebook... And a large number of users they see violating your privacy for couples, friends, family... that try to spy on their conversations.

Spy on WhatsApp is one of the most common. And it is because it is in this application where we turned over our side more intimate. The worst thing is that it is quite easy to gain access to the conversations of another person with WhatApp Web. The company added few months ago a notification when you use the session in another part, but can be overlooked.

WHATSAPP, APP, SMARTPHONE, INTERNET, MESSAGING

1.- WhatsApp Web, a tool that is too quiet

The messaging application does not have a full version for computers, but that bet by a kind of mirroring of the smartphone; which will be communicated with the computer. This is WhatsApp Web: you can simply pair the mobile with the browser so that the session is shared between both. Messages, contacts, groups, photos,... will All appear in the mobile and in the browser.

Anyone who has access to the mobile phone of the victim will be able to access their WhatsApps to only register the account in WhatsApp Web. What at first may seem complex, involves a process of no more than 10 seconds. It is enough that the victim is absent for a moment that the spy will open a tab of browser with WhatsApp Web, access to the QR of the account on the mobile and pair both devices.

WhatsApp is at this point a problem of privacy. Alerts you when it is actively using the session, but the notification disappears when the other person stops to read the messages by more that the session is still open. It is advisable to make the maximum possible impediments so that no one can read our messages. Especially if we suspect that someone close to you is interested in them.

2.- How to protect your account from WhatsApp so no one can spy on web

We have already seen how just a simple oversight for anyone to register the QR WhatsApp with the browser. So the first thing is to avoid such blind spots and always go with the mobile above. In addition, it is very important that you protect your lock screen with the maximum security possible. Footprint if the mobile has reader and/or pin security. With another important aspect: our password security should not know anyone.

The above should be pretty obvious, but I know from experience that these are aspects of the first that is overlooked. So let's increase the security: access to WhatsApp in two steps. This way the app will be prompted with a certain frequency a password to access the conversations. It will not prevent anyone from accessing the account because they don't always skip the checking, but adds more security.

Finally, we have to check what computers are logged in on WhatsApp Web. To do this we must do the following:

Go in the settings of your WhatsApp.

Go to WhatsApp Web.

Check the sessions that you have open and, when in doubt, calas.

If you had a session open when you have not used WhatsApp Web on your life, close it.

We must perform with a certain frequency these steps, and close sessions that have not opened. It is the only way to maintain control over one of the most insecure WhatsApp.

WHATSAPP, APP, SMARTPHONE, INTERNET, MESSAGING

Return Above

Chrome: fake accessories injected code in web pages - "TechnoTron"

2017-04-22T12:26:00.000-05:00

Index:
Prologue
1 Look around... but you also infect
2 What to do if you downloaded the plug-in?

Prologue

CHROME, BROWSER, INTERNET, VIRUS, MALWARE

Since few days ago, in our research lab, we have a growth in the number of detections of the JS/Chromex.Submelius threat. In some countries in the region like Colombia, Peru, Ecuador and Chile, its percentage of detections has been between 30% and 40% of the total of each country.

It's a Trojan, which redirects the browser to a specific URL that contains other types of malicious content. Given the high levels of detection of this threat, which is focused on affecting Chrome, one of the most popular in the present day web browsers, we realized the task of finding the way that this threat is spreading and how auser could fall into this trap.

1 Look around... but you also infect

An example of how it is spreading this threat found on a popular site to watch movies online. One of the options to view the contents, once the user wants to start playback opens an additional window in the browser:

For those who have ever visited such sites, this behavior should not be strange, since usually open those annoying windows that say "virus detected" or "work from home and make money". However, in this case the browser not redirected to another page with advertising as usual, but that leads to a site that asks you to go to another URL... and even that is do not click "Accept", not to appear the message.

This redirect points to the download of a complement from Chrome Web Store. In the following screenshot is the address bar of the browser until the add-in is installed:

If the user accept the download, appears a space beside the address with the complement icon bar, and if you click on it, goes to a new page with in Chrome Web Store that belongs to another new supplement. In this case, as you can see in the following screenshot, there are some recent comments about how useless that is this application:

Although at this point the playback of the movie has already started, the user's browser has been infected. Try to see the plug-ins installed on it, we find that is initially unloaded and that, with in the permissions you have, is the read and modify data from the visited web sites. This leaves an open window so that when the user visits a web site giving some kind of code on it:

In this way, while the user browses the Internet you can see how suddenly open you new windows with information from your system, taking it to download malicious code, advertising or other content sites. This leads to an infinite loop that ultimately is going to help who is behind the deceptive snap.

2 What to do if you downloaded the plug-in?

Where you've downloaded this malicious plug-in, you must remove it immediately of the Chrome browser. To do this, you can write "chrome://extensions" in the address bar and a time that you find it simply remove it.

As a precaution you should scan your computer with a trusted security solution torule out that you could have downloaded some other type of threat to your computer. In this case we recommend using our free ESET Online Scanner solution thatworks directly from the web browser.

As always, it is very important to be careful before you click and pay attention to web sites which are accessible, especially if they ask to download plug-ins. We've already seen other campaigns associated with Youtube, Facebook and other sites that have similar characteristics.

Therefore, we see that this type of campaigns are not isolated; in fact, there is a whole structure of redirects that will be described in more technical detail in a future article.

Return Above

CHROME, BROWSER, INTERNET, VIRUS, MALWARE

Info: ESET

He Sido Hackeado? With this Spanish page you will know if your email has been hacked - "TechnoTron"

2017-04-20T17:47:00.000-05:00

Posted On: April 20, 2017
By: TechnoTron

¿He Sido Hackeado?

HACK, E-MAIL, INTERNET

If you are regular readers of our blog already know that becoming is more common that you have some page or service online has been hacked, exposing the data of its users. The constant dripping of this type of news can lead us to think if our emails and your passwords are safe or if ever they have been exposed by an event of these.

To solve this problem there are pages such as BreachAlarm, Have i been pwned or Pwned List, but most of them or keep our information or not to reveal too many details. That's a Spanish developer decided to give the concept a twist creating ¿He Sido Hackedo?, a search engine similar to the previous but totally free, detailed and anonymous.

This page has been created by the analyst José M. Chia, and such and as he has told us, is intended to the awareness about the number of leaks that occur daily and threatened really which is our our privacy. All of this of course while creates a simple way that we can check if they have hacked any web where we are registered.

How it works page

In addition to offering a free alternative and 100% anonymous to the rest of pages that allow us to carry out this kind of research, I have been hacked also tracks inreal time a lot of web sites where usually publish these leaks (clearnet and darknet) and read documents (.doc, .xls, .pdf, etc) so that no data does not escape.

Using this website is as simple as performing a search on Google. The only thingwe have to do is enter our email and click on "Check". The page will take care of the rest, and if you find that our mail has been violated by any filtration will provideus with a detailed list with the where and when, as well as a link to the page whereour data is.

According to its creator, this page has been indexed 200 million emails, and neverstores data about our consultations: nor emails that seek, our IP. A there is also a version in English, and the project has an API to integrate consultations comfortably in any app.

If you ever had that doubt to know if our email has been hacked, it's time to get out of doubt and know with certainty if ever we have been the victim of hacking, if you liked this article, you can give you like and leave your comments

HACK, E-MAIL, INTERNET