Timeline for How secure is RDP?
Current License: CC BY-SA 3.0
31 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 15, 2016 at 13:52 | comment | added | Mark K Cowan | RDP over SSH (I use this from Linux to access Windows and Linux boxes remotely). | |
| Aug 14, 2016 at 15:01 | comment | added | Lie Ryan | If you don't want to open a listening port for RDP, you can connect to the machine through reverse connection (e.g. reverse SSH tunnel). | |
| Aug 14, 2016 at 7:22 | comment | added | Matthew Lock | Really TV is for providing workstation IT support to people remotely. It's pretty good for that, and very handy that the person you are helping can chat with you and see the screen while you are providing support. That's what I would limit TV to. For remotely logging into servers as others have said RDP over VPN is a much better solution. | |
| Aug 13, 2016 at 21:06 | comment | added | enkryptor | @underscore_d "TV still exposes known ports, right?" - no, its client work through the server. No need to open listening ports | |
| Aug 13, 2016 at 14:57 | comment | added | underscore_d | @enkryptor but in what way would replacing RDP with TV make things any better, if not a lot worse? TV still exposes known ports, right? and is an MITM? and has had mishaps in recent memory? and means the computer you're connecting to gets left w/ your session running in unlocked, public facing fashion, available to anyone who would think to turn on the screen? If the OP has details that would make this seem sensible then sure, this might be revealed in retrospect to be a very well-reasoned decision... but I'm just not seeing it as it stands | |
| Aug 13, 2016 at 13:55 | comment | added | enkryptor | @underscore_d We still don't know how prot's network was organized. The security lead engineer could object against exposing an RDP server to the Internet, not against using RDP itself. | |
| S Aug 12, 2016 at 21:14 | history | suggested | Basil Bourque | CC BY-SA 3.0 |
Linked to Wikipedia to explain acronyms
|
| Aug 12, 2016 at 20:34 | review | Suggested edits | |||
| S Aug 12, 2016 at 21:14 | |||||
| Aug 12, 2016 at 20:22 | answer | added | coteyr | timeline score: 6 | |
| Aug 12, 2016 at 19:48 | comment | added | Doktor J | @TylerH and how did they get a position on that security team (and not lose it) in the first place? | |
| Aug 12, 2016 at 18:22 | comment | added | TylerH | @underscore_d Not related to the question... but ostensibly they were a member of a security team and promoted to team lead, or were hired on directly as a team lead. Just like any other job in the world. | |
| Aug 12, 2016 at 14:28 | vote | accept | prot | ||
| Aug 11, 2016 at 17:53 | answer | added | Jean-Bernard Pellerin | timeline score: 10 | |
| Aug 11, 2016 at 12:07 | review | Suggested edits | |||
| Aug 11, 2016 at 12:29 | |||||
| Aug 10, 2016 at 21:23 | answer | added | Criggie | timeline score: 8 | |
| Aug 10, 2016 at 17:07 | answer | added | B. Shea | timeline score: 4 | |
| Aug 10, 2016 at 13:12 | comment | added | underscore_d | Sorry, but how does such a person get to a place in life where they have the title "Security Lead Engineer"? Did they win a raffle? | |
| Aug 10, 2016 at 12:18 | comment | added | PTwr | One of issues with TW, which RDP prevents by default, is: "Who moves my mouse!?" ;) | |
| Aug 10, 2016 at 9:34 | answer | added | SilverlightFox | timeline score: 36 | |
| Aug 10, 2016 at 1:30 | comment | added | spuder | In most cloud providers like azure and aws, you can setup security groups and only allow rdp traffic from whitelisted iOS | |
| Aug 9, 2016 at 22:26 | history | tweeted | twitter.com/StackSecurity/status/763139376482250752 | ||
| Aug 9, 2016 at 19:53 | comment | added | Rui F Ribeiro | I would never allow teamviewer as a renote access solution. RDP inside a VPN | |
| Aug 9, 2016 at 19:24 | answer | added | H. Idden | timeline score: 72 | |
| Aug 9, 2016 at 16:32 | answer | added | Rory McCune | timeline score: 17 | |
| Aug 9, 2016 at 16:04 | answer | added | Daniel Bungert | timeline score: 26 | |
| Aug 9, 2016 at 14:50 | comment | added | ave | TeamViewer is much, much less secure than RDP. With a properly configured RDP setup, you can have a pretty secure system, but with TW, your systems get compromised if they do a mistake. | |
| Aug 9, 2016 at 14:15 | comment | added | Jeff Meden | How is RDP being used (or proposed to be used)? Opening port 3389 facing the internet on all production servers and calling it a day is a bad idea for security. There are many options within Windows to make RDP more effective, so the answer to how secure a RDP based cloud hosting remote management method is, would be: "maybe" | |
| Aug 9, 2016 at 12:05 | answer | added | Overmind | timeline score: 2 | |
| Aug 9, 2016 at 11:18 | answer | added | symcbean | timeline score: 95 | |
| Aug 9, 2016 at 9:13 | review | First posts | |||
| Aug 9, 2016 at 9:31 | |||||
| Aug 9, 2016 at 9:09 | history | asked | prot | CC BY-SA 3.0 |