GridLock
FAQ
Information
Problems
Which
versions of PalmOS is GridLock compatible with?
Starting
with v1.30 of GridLock, it is now compatible with the complete range
of Palm devices. Ranging from OS3 upto OS5.
Does
GridLock still activate after a Soft-Reset?
Yes. GridLock
will continue to activate after both types of Soft-Reset and will prevent
HotSyncs to the device while it is locked. The only way to get access
to your machine with GridLock enabled is by doing a Hard-Reset. Please
see below for more details.
What's
the difference between the Freeware and GridLock Pro versions?
Due the
increasing amount of support we are giving to GridLock users (its proven
to be very popular), we have decided to have two versions. A Freeware
version and a Pro version.
GridLock
Pro includes extra features such as better security (800 billion instead
of 33 million combinations), the ability to show Owner Information,
and the Max. Fails feature that can be used to make your Palm even safer.
We will also be adding new features to GridLock Pro at a later time
so if you have any suggestions on what you would like to see, please
get in touch.
The Freeware
version is fully functional (apart from missing GridLock Pro features)
and does not time-out or produce nag-screens. We recommend downloading
this first to try it.
Why
doesn`t GridLock contain a feature to hide/show private records.
The current
versions of PalmOS do not encrypt private records, they merely set a
bit to say whether they are visible or not. This means that anyone with
access to a HotSync cable can view your private records regardless of
whether they are hidden or not. However, if you have locked your Palm
with GridLock there is no way to use HotSync or access any data inside
the Palm without taking the machine apart and directly accessing the
RAM chips, therefore any data inside your Palm is extremely
safe without the need for a private records feature.
I
heard there was a way of accessing data on the Palm even while it was
locked, what does GridLock do about it?
PalmOSs
prior to 4.0 contain the debugging shortcuts .1 and .2. These shortcuts
enable the serial port debugging console even while the machine is in
a locked state. GridLock checks for these shortcuts and will ask if
you would like to have them permanently removed from the system. Without
these shortcuts it is not possible to retrieve any data from the Palm
while it is locked. In order to make your Palm as safe as possible please
select Yes when GridLock displays this message. (Please note: GridLock
will sometimes display this dialog more than once, this is an extra
security measure and is quite normal.)
Exactly
how safe is my Palm if I have GridLock installed?
With GridLock
installed there are 4 ways to gain entry to your data on the Palm:
- By brute
forcing the Passgrid.
- By having
your Passgrid compromised.
- By having
a Hack already installed that displays private information.
- By removing
the cover and reading the RAM chips directly.
The first
method depends on how safe your Passgrid is. Although
its unfeasible to try and brute force every single combination, please
try and make sure that your Passgrid cannot be easily guessed. As a
simple test, have a friend try and break into your Palm.
The second
and third methods simply require common sense. Never install any Hacks
that allow you to access private data while the machine is locked. And
never give your Passgrid to someone you don`t fully trust, or allow
anyone to look over your shoulder while entering the Passgrid.
The fourth
method is the only real way to get information out of your Palm regardless
of whether you have GridLock (or any other application) installed or
not. Although this method requires a lot of expertise and care, it is
still possible to read the contents of any RAM/ROM chip by attaching
extra circuitry to the motherboard inside the machine. The only way
to prevent private data from being accessed in this case is by encrypting
the data on the Palm itself. If you are concerned about this we recommend
the excellent freeware CryptoPad,
it encrypts using the well known and highly scrutinized Blowfish
algorithm and supports keys of up to 448 bits.
How
many combinations are there in GridLock?
GridLock
uses a grid of 5 by 5 squares, each square can be On or Off, giving
a maximum of 2^25 or 33 million combinations.
GridLock
Pro uses a 5 by 5 grid of "tri state" squares. This means
that there are 3^25 or roughly 800 billion combinations.
Not all
of those patterns make good Passgrids, some are too simple, some are
too complex, but there are still a vast amount of unique, easy to remember
Passgrids.
How
do I choose a safe Passgrid?
Deciding
on a safe Passgrid is very much like choosing a safe text password.
You don`t want a password that is too short or easy to guess, and you
don`t want one that takes a long time to enter or is too complex to
remember.
Try and
choose a grid that has a reasonable amount of squares in a fairly complicated
pattern. For instance, an L shape with 1 or 2 extra squares in the middle,
or 2 crossing lines at different angles.
Choose
a Passgrid that represents the amount of security you need. If you are
not too worried about someone gaining access to your Palm but just need
to stop a child from playing with it, choose something simple, quick
and easy to remember. If however your Palm contains very sensitive information,
such as Credit Card numbers, bank details etc.. choose a Passgrid that
takes at least a couple of strokes of the pen to enter. If possible,
add a few random squares to the pattern to help prevent someone guessing
it by trial and error.
Lastly,
get some friends to try and break into the Palm. Look at what they are
entering to get some idea of what kind of patterns people try when they
don`t know what they`re looking for.
(If your
friend does manage to guess a Passgrid that you think is reasonably
unique, we`d like to hear
from you. The chances are that rather than being extremely lucky or
psychic, they merely entered a grid that `felt` correct. If they guessed
the correct grid, the chances are someone else will too. We are planning
at some stage on setting up a database of these `unsafe` Passgrids that
people should try and avoid.)
Will
my alarms still work with GridLock enabled?
Yes. Your
alarms should behave as normal and display ontop of the GridLock entry
screen. You will not be able to exit to another Application until you
have entered the correct Passgrid however.
Which
Hacks are compatible with GridLock?
GridLock
has been tested with a number of Hacks and Launchers, all problems found
so far have be addressed. You may find problems with other Hacks/Applications
that do a similar thing to GridLock, i.e.. display a security screen
on power up. But this can usually be fixed by disabling the power on
screen on the application that causes the problem. GridLock will work
fine with most Launchers and Popup window Hacks, but please make sure
that you do not use a Hack that can be used to display private information
while the Palm is locked.
If you
find any other Hacks/Applications that is causing problems with GridLock,
please let us know.
How
do I get GridLock to `self-destruct` if someone tries to break into it?
GridLock
Pro has a feature that can be used to permanently lock the device after
a certain amount of failed attempts to access it. We use this method
instead of a 'self-destruct' or 'bomb' that wipes the contents, please
read this for reasons why.
Why
is there no `bomb` like feature that wipes the machine after a number
of failed attempts?
We believe
that permanently locking the machine is a better solution than wiping
the contents of it. There are a number of reasons why:
1. Permanently
locking the machine still allows the Owner Information to be displayed
so that the machine can be returned if discarded and found again.
2. If someone
steals your machine and doesn`t know how to do a HardReset, the machine
will be rendered useless. Whereas wiping the contents will in most cases
cause a HardReset, allowing the thief to still use it.
3. We are
confident enough in GridLock to protect your machine at all times apart
from when someone physically opens it and reads
signals from the RAM chips. If someone is savvy enough to do this they
are highly likely to know that they have little chance of guessing the
Passgrid. They would simply open it before the machine is wiped.
4. Wiping
the entire contents of RAM can take time to complete, so its possible
to interrupt this process with a SoftReset. If this happened its also
possible that certain parts of the OS that handle security could be
corrupted, rendering the machine unlocked and usable.
I
have installed GridLock but I can still bring up certain `Hacks` on the
main entry screen.
GridLock
works very simply; it does not allow itself to exit until you have entered
a valid Passgrid. It does not prevent other `Hacks` from starting, or
keys from being processed, or hide any data, it merely prevents PalmOS
from switching to another application and makes sure that it is the
first application to start when you power on the machine. This means
that `Hacks` that display popup windows will still display. For instance,
TealLaunch
will still activate even while GridLock has locked the machine.
However,
you will not be able to switch to another application while GridLock
is active. So even if you have a `Hack` that allows you to launch another
application, it will not start until GridLock has allowed it to. PalmOS
is single tasking operating system, therefore it is not possible to
start another application while one is already running.
I
have forgotten my Passgrid, GridLock doesn`t recognise my Passgrid, I
can`t get past GridLock, can you help?
There are
no `backdoors` in GridLock. If you cannot get past GridLock you will
have to do a Page Up Soft Reset and use your System Password to gain
access to your machine.
If you
are experiencing problems with GridLock such as it not appearing, or
not accepting your Passgrid, it is most likely that the Palm has become
unstable somehow. GridLock tries to `err` on the side of security, this
means that if something goes wrong it will still try and keep your Palm
locked even if it can`t execute correctly.
You may
however be able to fix the problem by performing one of these steps.
I
am having problems with GridLock causing my Handspring Visor / Palm III
to crash.
We have
had a number of reports of GridLock causing HandSpring Visors and Palm
IIIs to behave abnormally, including crashes and Hard Resets. This is
a stack related problem that we are currently trying to find a work
around for. These 2 machines seem to have a smaller stack area than
other PalmOS machines. If you would like to be notified when we have
a new version, please send us an email.
GridLock
does not activate when I soft-reset while the machine is turned ON.
GridLock
secures your Palm device as soon as the machine is turned OFF (unless
you have lock-delay enabled.) This means that soft-resetting while the
machine is ON will not cause GridLock to activate. It will activate
the next time the machine is turned OFF however.
My question isn`t here or I was unable to find a
solution to my problem.
If you
are still having problems with GridLock, you may like to try resetting
the GridLock settings to their default values. To do this, select Reset
Settings from the main menu (version 1.24 and above.)
If that
doesn`t solve the problem, then please try these steps:
1.
If you can unlock your Palm, delete GridLock and reinstall it.
2.
Place a pin in the small hole at the back of the machine. This wall
cause a Soft Reset. It will not erase any data but it will clear temporary
memory and restart all applications.
3.
Do the same as 2. but while inserting the pin, keep the Cursor UP
key pressed down. This will Soft Reset the machine and prevent any
applications from restarting. The built-in System Password screen
should appear.
4.
Last resort, WARNING: THIS WILL ERASE ALL DATA. Place a pin
in the hole and keep the Cursor Down key pressed. After doing this,
perform a HotSync to reinstall your applications and data.
If
your question was not answered in this FAQ, please feel free to contact
us at support@pdabusiness.com
providing details of the problem along with your OS version, Hardware
type and a list of any other Hacks and programs installed. We will
try our best to respond as quickly as possible, but please note that
due to the volume of emails we receive regarding GridLock, we give
priority to GridLock Pro users.
|