3 ms·

Also note their persistent refusal to implement TLS for their web access. This attitude alone tells me never to trust this project ever, even when they finally

by summm 4y ago

Also note their persistent refusal to implement TLS for their web access. This attitude alone tells me never to trust this project ever, even when they finally should use TLS. Sadly there is no other FOSS out there that combines remote support with good NAT traversal. Existing remote access tools such e.g. VNC all do not offer NAT traversal and are incredibly hard to setup. All FOSS web/phone conference tools offering screen sharing refuse to implement transferring Cursor/Keyboard control. Probably because it is not so easy, but mostly, I guess, out if fear for diffuse security problems. Too bad people then will be compelled to use this absolute mess...

ibeckermayer 4y ago
I work on the Desktop Access feature for Teleport: https://goteleport.com/docs/desktop-access/getting-started/ https://goteleport.com/docs/desktop-access/getting-started/ The tool itself is open core: https://github.com/gravitational/teleport https://github.com/gravitational/teleport Most of the desktop access stuff is open source. (The only desktop related thing that's proprietary is our tool that allows for access to machines not connected to Active Directory). A sizeable chunk of the desktop access code is even Written In Rust™: https://github.com/gravitational/teleport/tree/master/lib/srv/desktop/rdp/rdpclient https://github.com/gravitational/teleport/tree/master/lib/sr...!
dns_snek 4y ago
Are you talking about their website, rustdesk.com? It looks like they have HTTPS version of "rustdesk.com" but don't redirect to it automatically. Do you have any links to issues/interactions you find concerning? I've been evaluating different remote desktop tools recently and I'd certainly like to know about any other red flags.
- dns_snek 4y ago
  I think I found the issue: https://github.com/rustdesk/rustdesk/issues/856 https://github.com/rustdesk/rustdesk/issues/856 Furthermore they seem to share servers with what seems like an unrelated ecommerce website: https://github.com/rustdesk/rustdesk/issues/2712 https://github.com/rustdesk/rustdesk/issues/2712 It doesn't seem like they take security all that seriously.

by summm 4y ago

ibeckermayer 4y ago

I work on the Desktop Access feature for Teleport: https://goteleport.com/docs/desktop-access/getting-started/ https://goteleport.com/docs/desktop-access/getting-started/ The tool itself is open core: https://github.com/gravitational/teleport https://github.com/gravitational/teleport Most of the desktop access stuff is open source. (The only desktop related thing that's proprietary is our tool that allows for access to machines not connected to Active Directory). A sizeable chunk of the desktop access code is even Written In Rust™: https://github.com/gravitational/teleport/tree/master/lib/srv/desktop/rdp/rdpclient https://github.com/gravitational/teleport/tree/master/lib/sr...!

dns_snek 4y ago

Are you talking about their website, rustdesk.com? It looks like they have HTTPS version of "rustdesk.com" but don't redirect to it automatically. Do you have any links to issues/interactions you find concerning? I've been evaluating different remote desktop tools recently and I'd certainly like to know about any other red flags.

dns_snek 4y ago
I think I found the issue: https://github.com/rustdesk/rustdesk/issues/856 https://github.com/rustdesk/rustdesk/issues/856 Furthermore they seem to share servers with what seems like an unrelated ecommerce website: https://github.com/rustdesk/rustdesk/issues/2712 https://github.com/rustdesk/rustdesk/issues/2712 It doesn't seem like they take security all that seriously.