3 ms·

Is this for real?

curiousgal 10y ago
https://www.reddit.com/r/technology/comments/4m7ay6/teamviewer_has_been_hacked_they_are_denying https://www.reddit.com/r/technology/comments/4m7ay6/teamview...
miles 10y ago
https://news.ycombinator.com/item?id=11826431 https://news.ycombinator.com/item?id=11826431 https://securityintelligence.com/compromised-before-my-very-eyes-how-i-almost-got-hacked/ https://securityintelligence.com/compromised-before-my-very-... https://www.reddit.com/r/teamviewer/comments/4m7j4a/i_covered_one_of_the_teamviewer_news_articles_i/ https://www.reddit.com/r/teamviewer/comments/4m7j4a/i_covere...
cmdrfred 10y ago
It seems team viewer is doing the "Deny, Deny, Deny" thing.
- nikanj 10y ago
  Playing the devil's advocate here, but what do you think they should be doing, in case these are a result of password re-use and similar user errors?
  - voltagex_ 10y ago
    Changing the way the ID / password generation is done and requiring additional verification when a new device wants to connect to an existing TeamViewer install
  - LeifCarrotson 10y ago
    Send out an email saying "We're seeing increased attacks on Teamviewer accounts with reused passwords. Please reset your password, especially if it has been used on other sites." No need to take blame - I gather that TV is not exactly a transparent organization, and perhaps their customers are less amenable to security update or outage post-mortems than most HN readers, but they ought not stick their heads in the sand. As a paying customer, I should not have to find this out through Reddit and HN.
  - rossrubacon 10y ago
    Hard to say or prove that changing your password actually protects you. best method to avoid is to not have it running. Like I mentioned before when you run something that uses a server to tunnel through your firewalls you have to feel this server is trusted. i do not trust a server I rather run a desktop sharing tool like uvnc and control when it is on and off and have no unknown party tunnel . In the end when I was asked to install teamviewer (I use Linux BTW) I could see all thr process even after I turned it off. i would find myself killing off the 3 or so process that maintained a connection to a server. Heck i get alot of I am silly and its secure. Now I have not had anything happen to me and yet to see anyone beyond stories online. Do not take my word for it run a debugger or trace it wireshark do what you will you will get a suprise. sorta like when I ran skype in linux and traced what it accessed (scary stuff)

Is this for real?

https://www.reddit.com/r/technology/comments/4m7ay6/teamviewer_has_been_hacked_they_are_denying https://www.reddit.com/r/technology/comments/4m7ay6/teamview...

miles 10y ago

https://news.ycombinator.com/item?id=11826431 https://news.ycombinator.com/item?id=11826431 https://securityintelligence.com/compromised-before-my-very-eyes-how-i-almost-got-hacked/ https://securityintelligence.com/compromised-before-my-very-... https://www.reddit.com/r/teamviewer/comments/4m7j4a/i_covered_one_of_the_teamviewer_news_articles_i/ https://www.reddit.com/r/teamviewer/comments/4m7j4a/i_covere...

cmdrfred 10y ago

It seems team viewer is doing the "Deny, Deny, Deny" thing.

nikanj 10y ago
Playing the devil's advocate here, but what do you think they should be doing, in case these are a result of password re-use and similar user errors?
- voltagex_ 10y ago
  Changing the way the ID / password generation is done and requiring additional verification when a new device wants to connect to an existing TeamViewer install
- LeifCarrotson 10y ago
  Send out an email saying "We're seeing increased attacks on Teamviewer accounts with reused passwords. Please reset your password, especially if it has been used on other sites." No need to take blame - I gather that TV is not exactly a transparent organization, and perhaps their customers are less amenable to security update or outage post-mortems than most HN readers, but they ought not stick their heads in the sand. As a paying customer, I should not have to find this out through Reddit and HN.
- rossrubacon 10y ago
  Hard to say or prove that changing your password actually protects you. best method to avoid is to not have it running. Like I mentioned before when you run something that uses a server to tunnel through your firewalls you have to feel this server is trusted. i do not trust a server I rather run a desktop sharing tool like uvnc and control when it is on and off and have no unknown party tunnel . In the end when I was asked to install teamviewer (I use Linux BTW) I could see all thr process even after I turned it off. i would find myself killing off the 3 or so process that maintained a connection to a server. Heck i get alot of I am silly and its secure. Now I have not had anything happen to me and yet to see anyone beyond stories online. Do not take my word for it run a debugger or trace it wireshark do what you will you will get a suprise. sorta like when I ran skype in linux and traced what it accessed (scary stuff)