Re: Remote connections

From: Ansgar -59cobalt- Wiechers (bugtraq_at_planetcobalt.net)
Date: 10/14/04

  • Next message: Laura Robinson: "Re: Re: Restricting account to a computer only" 
    Date: Thu, 14 Oct 2004 17:43:41 +0200
To: focus-ms@securityfocus.com

    On 2004-10-13 GuidoZ wrote:
    > Can the terms "Microsoft Remote Desktop" and "Secure" even be used in
    > the same discussion? =)

    Why not? I don't know of any current exploit for RDP set to high
    encryption, and even if there were any, connections may very well be
    shielded by encrypted tunnels.

    > The only way I could see applying any form of security is to do it
    > under the protection of a VPN. As for not having the active user
    > logged off, I don't have an answer for that.
    >
    > Personally, I'd recommend one of the many other remote desktop tools
    > out there. WinVNC and Radmin both come to midn quickly. (WinVNC can be
    > done through SSH. Though I'm not positive, I believe you can encrypt
    > Radmin sessions as well.) Google both for more info.

    RDP can be tunneled thru SSH as well and has much better performance
    than VNC (don't know about Radmin).

    Regards
    Ansgar Wiechers 

    -- 
"Those who would give up liberty for a little temporary safety
deserve neither liberty nor safety, and will lose both."
--Benjamin Franklin
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Laura Robinson: "Re: Re: Restricting account to a computer only"

    Relevant Pages