3 Ways Inkscreen Helps to Prevent Software Supply Chain Attacks

The SolarWinds SUNBURST breach has turned a spotlight on all software vendors, Inkscreen included, and how the industry handles the complicated business of software development and maintenance. We take our customers trust very seriously, and since the inception of our Company we have taken measures to ensure that we are never the weak link in their web of critical software systems. Here are a few things we do to maintain your trust.

1) Veracode. We have partnered with Veracode since 2014 to run regular scans of our applications to check for any potential vulnerabilities. We have consistently maintained a score of 99 or 100, earning us the “Veracode Verafied” designation. This extra step adds significant time to our release schedule and the service represents a large cost to our operation, however it allows us to publish software updates with a high level of confidence that we are not introducing some kind of threat to our customers.

2) No development shops. Outsourcing software development to big offshore or near-shore development shops is extremely common and can save a publisher a great deal of money. The problem with this approach is that you have very little control over who is actually contributing to your codebase, and this makes us uncomfortable. We do outsource some of our work, but only when we can work directly with the individuals working on the project. This is not an indictment to using outsourced dev teams, it’s just not the way we do business.

3) Background checks. This leads me to the third and final point. We run detailed background checks on everyone who contributes to our application development efforts and we have done so since 2013.

We know we are still at risk of making mistakes, but we have always and will always place a strong priority on ensuring the software we release to the world does not harm to our customers or introduce risk to their data and operations.

CAPTOR 3.6.3 (iOS): Enhanced OCR Search

Welcome to 2021! We are kicking off the new year with the release of our new enhanced “smart” search function. Beginning with CAPTOR iOS release version 3.6.3 the search function can now be used to find content containing any recognizable text. Initially the app will be processing photos and scanned documents, and future releases will bring search capabilities to video and even audio recordings.

If you are an existing CAPTOR user, after you upgrade the app to v3.6.3 you’ll see a new button on the home screen prompting you to allow the app to process your existing files for this new search capability. The process could take a few seconds or a few minutes depending on how many files you have saved in the CAPTOR app. You are able to pause the process and finish it later without problem. As soon as that process is complete, the button on the home screen will disappear, and your existing documents and photos will now be searchable by any text the app was able to detect.

IMPORTANT: The optical character recognition (OCR) process only occurs on the device. Your content is not being transferred, stored, or processed on any external servers.

For new users and any new captured photos or documents scanned with 3.6.3, this process will occur automatically and silently in the background. In other words, you will not need to tap a button to process or upgrade new files and content for it to become searchable.

We encourage you to try out the new search capabilities by scanning a document or taking a picture of something with clear text on it. Then, tap the Folders button, and then the Search button. Enter some of the text from your document or photo and you should see the content in the search results.

CAPTOR Search will still display results that match text found in the following aspects of the CAPTOR content:

• File name. The actual name given to the content is searchable and included in results.

• Folder name. The name of any folder you create is included in search results.

• Text Label Annotations. Any text label annotations are searchable and included in results.

• Media Notes. Any notes added to content by tapping the (i) button while previewing content are searchable and included in results.

• NEW! Text in Photos & Documents. CAPTOR now runs an OCR process on all documents and photos and search results will now encompass any text found within the content.

Please note, the enhanced search is currently only functional within the CAPTOR app. Shared or backed-up content will not retain the enhanced OCR search features.

We will continue to improve and expand CAPTOR Search capabilities. Please share comments and feedback through our Support page.

BlackBerry Docs Service enabling secure managed backups to SharePoint and more

For our customers using BlackBerry UEM we are proud to announce the general availability of BlackBerry Docs Service (Docs) as part of the CAPTOR for BlackBerry v3.6.0 (iOS) update. Docs enables secure, managed backups to Microsoft SharePoint, Box, and FileShare repositories. This new option unlocks the ability to make CAPTOR content available on any device that the user can authenticate BlackBerry secure services on, including mobile devices and laptops running BlackBerry Access or BlackBerry Work. This integration will dramatically simplify the task of establishing and supporting content backups from employee devices to file repositories, as it leverages existing, proven and secure infrastructure (BEMS and BlackBerry Dynamics).

If your organization already has a BlackBerry Enterprise Mobility Server (BEMS) and connected file repository, then establishing the service connections to CAPTOR is extremely easy. The first step is to refresh the Apps page in UEM to pull down the latest changes to the CAPTOR app configuration.

Open the CAPTOR for BlackBerry app listing and either edit an existing app configuration or tap + to create a new one. Go to the tab labeled “Backup” and ensure that Enable Backup is checked. There is a dropdown selector for Data Transfer Protocol. If you select Docs, it will disable any other backup protocol you may have had in place previously and establish Docs as the new backup provider.

Further down on that same screen you will find the DOCS settings for URL, Path, User, Password, Domain, and Repository. These fields support wildcard values, such as $EMAIL$ or $USERID$. Any field that is left blank will be configurable by the end user within the app. If the user only has access to one repository through BEMS, you may leave this field empty as the user will have the ability to select if from a list populated by the service. You can also leave the URL field empty since the app has the ability to find the BEMS server associated with their user account.

As with all existing CAPTOR backup protocols, you have the ability to establish the process to occur manually or automatically, and separately you can have the content permanently deleted from the CAPTOR container once it has been backed up, either immediately or on a delay. For initial testing we recommend a manual backup (do not check the Automate Backup box).

The content deletion settings will only delete content that the app deems to have been successfully backed up to your file repository. Enter a numeric value to specify how many days the content should remain in the app after a successful backup before being deleted.

Finally, the Content Quality option will allow you to specify the quality of CAPTOR content that is backed up. If the goal is to have the highest quality photos, videos, etc. exist on your file repository, then select High. In our testing, Medium seems to be the optimal value that we would recommend for most customers, especially considering the longterm costs of storage.

Don’t forget to Save the app configuration AND the app listing itself to apply the changes!

On your test device, ensure you have installed CAPTOR for BlackBerry v3.6.0 on iOS or v1.2.7 on Android. Launch the app and go to Settings and then Backup Config.

Select the DOCS option. Any settings that were configured in UEM will be populated. If you left the URL and Repository fields empty in UEM, toggle the setting for “Find DOCS Server”. Select the server, and the available repository options will populate. When everything is set, tap Test Configuration.

If you see a “Success” message you can advance to testing the service. A manual backup can be conducted by going to the main Folders screen. Either tap Backup to copy all of the CAPTOR files, or swipe left on a folder to copy only that specific folder. If you use Docs as part of BlackBerry Work, you can launch that app and verify that your CAPTOR files are now copied over.

We hope you find the combination of CAPTOR and the BlackBerry Docs Service to be extraordinarily useful. If you have questions or feedback please do not hesitate to contact us.