4 ms·
Now the NSA can watch your screen! </sarcasm>
by kryten 13y ago
Now the NSA can watch your screen! </sarcasm>
- Spearchucker 13y agoThat's valid. Remote desktop opens up some interesting attack vectors, whether used by the NSA or just some hacker with malicious intent. There's nothing I can see about security mitigations...
- drivebyacct2 13y ago"valid" aside from the fact that there's no way in this world or the next that all of that video and remote desktop traffic is going though Google's servers.
- hobolobo 13y agoSo the traffic won't have 'direct access' to Google's servers? That's reassuring :)
- MichaelGG 13y agoSo, two users behind a proper NAT or firewall won't be able to use this feature?
- mparlane 13y agohttps://en.wikipedia.org/wiki/Hole_punching https://en.wikipedia.org/wiki/Hole_punching tada.
- MichaelGG 13y agoYeah that's not a general solution, that's just exploiting problems in particular NAT implementations.
- mparlane 13y agoSkype did just fine with it.
- MichaelGG 13y agoIncorrect. Skype relays media via other users when two users cannot directly connect. So if you and I are behind proper NATs, and no negotiation works, then we agree on a nearby (super?)node that is accessible, and relay media through there. Hole punching _can_ work, but again, it's exploiting implementation quirks in NAT devices and isn't a general solution (though it might do pretty well). The only standard way (AFAIK) to open up NAT is via UPNP, which the client software (and NAT device) needs to support. The client then talks to the NAT device and tells it to port forward. It seems pretty common nowaday, and is more elegant and secure than the hacky "poke around and see what works" implementations.
- mparlane 13y agohttp://www.h-online.com/security/features/How-Skype-Co-get-round-firewalls-747197.html http://www.h-online.com/security/features/How-Skype-Co-get-r... Note the date, things are very different now.
- deleted 13y ago[deleted]
- VikingCoder 13y agoI have to be logged in to my Google account to use it. Did I mention that I use two-factor authentication? Show me another Remote Desktop software that enforces two-factor authentication.
- kryten 13y agoWe use RDP + TS gateway over VPN which you have to auth your remote key before you can connect. That's 4 factor :)
- deathhand 13y agoHow many times do you enter in the same credentials throughout the logging process?
- kryten 13y agoThere are four entirely different credentials. Pain to remember, but it's definitely secure.
- VikingCoder 13y agoDoesn't one key-logger on the client computer reveal all of the passwords? That's one-factor authentication. Two-factor means you need two things, not just the passwords, but for instance also a device. You mentioned a remote key, so yes, it sounds like you have two-factor. But not four.
- kryten 13y agoI have a signify key as well so yes it is minimally two-factor. Fair point about the keylogger. I didn't consider that - it's not my network to worry about :)