3 ms·

For a targeted attack with a hacker remotely or physically controlling the client, I agree. However I think an automated attack would be difficult, especially

For a targeted attack with a hacker remotely or physically controlling the client, I agree. However I think an automated attack would be difficult, especially if the VD sent its data to the client as a video stream, and only recieved keyboard and mouse inputs. Now maybe there's some fancy computer vision that could handle this (and all without the employee noticing)...

tgsovlerkhgsel 5y ago
You don't need computer vision to send Win+R, cmd<enter>, and whatever the Windows equivalent of "curl | bash" is. It's definitely going to keep a lot of the commodity malware out, but it's only going to stay secure until attackers start targeting it. And the risks from "inside" the machine (user downloads and runs something bad) don't go away, although the company gets a bit more control over the network (could also be done with an always-on VPN).