Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
98 views

What security risks do you face when connecting to a server via RDP? [duplicate]

What security risks do you face when connecting to an (possibly foreign) RDP server? Opening an unsigned RDP file triggers the following warning: RDP is a one way street, right?
0
votes
1answer
223 views

Should remote access (RDP/SSH) only be allowed for VPN clients? Or should RDP and SSH be opened the public?

I am about to push hard against the powers that be and strongly recommend that we shift our many (20+) consultants from direct public access to RDP & SSH to VPN clients (connecting to a ...
1
vote
1answer
179 views

Is Windows 7's Remote Assistance feature secure?

Are there known attacks that can intercept an ongoing Remote Assistance session, for example to take screenshots or even worse, impersonate the other computer and send arbitrary keystrokes, or to ...
2
votes
0answers
136 views

What if anything is the security differences between team viewer 7 and team viewer 9?

Is anyone aware of any major overhauls or security fixes to Team Viewer 9 (since v7) or does the popular accuvant blog ...
1
vote
1answer
134 views

how much of a security threat would this be?

If I set up a Domain Controller server to be accessible from the internet via Remote Desktop Connection (through port forwarding in the router), how much of a threat would that be? and if I have a ...
2
votes
1answer
123 views

Security of RDPs and infected host system

I currently use a lot of Remote Desktop Connections and even mRemoteNG and I am curious, do key loggers and other security threats have the ability to see what I type and do on the RDPs? Can they ...
4
votes
1answer
968 views

Preventing LSASS from storing clear-text passwords in Kerberos environment

It is a well known security risk that LSASS stores clear-text passwords if a user has performed a keyboard-interactive logon on a machine - be it local login to his/her workstation or using RDP to a ...
2
votes
1answer
4k views

Risks of Microsoft Remote Desktop access behind a secure VPN

This is mostly for my own education, but a scenario has came up at work that has me skeptical. I'd like for the security experts to tell me if this policy is overbearing or not. I remote into a VPN ...
4
votes
4answers
5k views

Enable RDP for internal network only

I just got a tablet and I want to use it to RDP into my main computer. The thing is, the first thing I did when I set up my PC was to disable RDP. I am not comfortable, and have no use for, allowing ...
11
votes
2answers
2k views

Is there a secure way to have a publicly facing terminal server?

TL;DR We are looking at opening port 3389 for a terminal server all the advice I’ve seen is that its suicidal but without good explanations as to why. Is it really that bad? We are looking at setting ...
3
votes
1answer
251 views

Is RDP an effective security barrier

If you need to provide access to a GUI / GUIs in one network from within another network, can RDP (e.g. via Terminal Services) be used as an effective security 'barrier', to stop any other direct ...
1
vote
2answers
215 views

is RDP7.0 authentication process secure enough?

Latest version RDP used NLA, CredSSP and TLS to secure the authentication process. It sound like secure but in reality does it really secure enough. I knew that the previous version RDP is ...
3
votes
2answers
996 views

Failed RDP brute force attack from Microsoft IP address?

I use RDPGuard on my webserver. I have noticed that it blocked an IP address which seemed to originate from a Microsoft registered IP address: Process Information: Caller Process ID: 0xf78 Caller ...
1
vote
1answer
217 views

Implementing Secure Remote Password with Remote Desktop Application

I had read the Secure Remote Password Protocol paper written by Tom Wu. This protocol is resistant to dictionary attacks. I have also go through some papers regarding to VNC attacks due to weak ...
5
votes
2answers
423 views

Connection on port 3387 Event viewer says “authorized”

This event shows up multiple times within a minute like it was being brute-forced, but it says "authorized". My question is: Is there anyway I can see any commands that came in from this connection? I ...
3
votes
1answer
437 views

How do I configure Terminal Server (and clients) for use over untrusted Wifi networks?

Suppose a client wants to directly connect to Terminal Server exposed to the Internet, without a VPN, ... what software & settings is needed to properly protect against WiFi based attacks? ...
1
vote
2answers
854 views

Unauthorized activity on port 3389

If you detect activity on port 3389 (the mouse starts moving) What is the first steps you should take from a security standpoint, and who should be notified?
0
votes
3answers
7k views

Win Server 2008 RDP Attack

On one of my machines I run Win 2008 R2 server. It has been recently updated. My RDP session is limited to my IP address only and firewall is UP. Even though the main RDP post 3389 is blocked by ...
1
vote
1answer
347 views

How am I able to use Input Director when one machine is VPN'd into work?

So - I don't actually have a problem, but I'm really curious, because apparently VPN's don't work the way I thought they did. It was my impression that when I VPN into my office, my computer is ...
3
votes
4answers
5k views

What is the threat of having the clipboard enabled on Citrix and other rdp?

It is a question I have had for some time which I have never received a solid answer on. It seems most infosec teams prefer to disable clipboard functionality on Citrix and other RDP setups. What is ...
6
votes
2answers
3k views

Is opening port 3389 on a router and forwarding this to a Windows SBS 2003 server secure?

I know of a company who has port 3389 open on their router and forwards this to a Windows SBS 2003 server. The server has the Windows firewall switched on, is patched and has an up to date antivirus ...
3
votes
2answers
249 views

RDP - Same login sufficient?

I just authorized remote access to my Windows 7 machine (not using NLA, since I run a mainly Linux network). I diabled Remote Assistance. My user (JoeBlow) is protected with password 123456 and ...
3
votes
3answers
324 views

Dedicated Server in Cloud Environment - SSL Remote Login vs Dedicated VPN

Thanks for taking your time to look into this question. Background I have my website hosted in a dedicated server in the cloud. The server is a Windows 2008 R2 machine. To publish I FTP files to ...
7
votes
2answers
752 views

What information is exposed by simply opening an RDP connection to the internet?

Microsoft, Rackspace and other hosted providers allows people to RDP into that server. Here are a few examples: Microsoft has something called "Azure Connect" it is very easy to expose a domain ...
3
votes
1answer
475 views

Saving connection parameters in an RDP file

For connecting to a remote Windows Server 2008 I use a standard Windows 7 RDP remote desktop connection. In an RDP dialog there is an option to save connection parameters to an RDP file to use it ...
3
votes
2answers
658 views

Can a virtual machine program view a host machine's connections?

I don't really know anything about computers. I need to run a virtual Windows machine inside an Ubuntu system. My current setup uses a stripped down version of Windows XP on VirtualBox. I intend to ...
4
votes
3answers
2k views

Is there a compelling reason to ssh tunnel RDP connections?

We don't run any Microsoft products natively in our office, but there are a few folks who use a linux RDP client to access an application on remote virtual desktops with a service provider. Would it ...
14
votes
2answers
3k views

Hiding user account names from unauthenticated RDP sessions

This is for a Windows 7 Ultimate system, which is not a member of a domain. When I log into the system locally, I am required to either manually enter my user ID or authenticate with biometrics. The ...
1
vote
1answer
2k views

RDP vs. VNC when looking them from security side

Regarding: http://unix.stackexchange.com/questions/12924/ssh-tunnel-with-vnc Which one would be better, if we look it @security side? I heard that RDP is very very poor when it comes to security.
8
votes
2answers
527 views

How can Network Disconnect be implemented for RDP on a Windows system (2003/XP or later)?

From NIST SP 800-53, Rev. 3: SC-10 NETWORK DISCONNECT Control: The information system terminates the network connection associated with a communications session at the end of the session or ...