3 ms·
Well I never ever expose RDP to the internet directly. Allow only office IP or setup some VPN/jumphost via ssh whatever. I trust SSH much more than RDP to not
by ozim 4y ago
Well I never ever expose RDP to the internet directly. Allow only office IP or setup some VPN/jumphost via ssh whatever.
I trust SSH much more than RDP to not have RCE/auth bypass bugs. SSH is also much easier to setup key auth or 2FA than in RDP if one like they mentioned in post are more used to setting up Linux boxes.
After reading this blog post - I would not send any logs to their servers.
- greatquux 4y agoI think though it may be better without 2FA to block attacking IPs no matter what the protocol.
- CyanLite4 4y agoExactly! I at first thought this was a rogue or disgruntled employee who wrote a blog post on the way out. But it appears to be a legit article sanctioned by their company. They literally opened a server without firewall rules for anyone to connect to their RDP port, and wrote a blog article to brag about it. They also have a Windows agent but they brag about not using Windows in the past 20 years…