Remote Desktop... how safe is it?

[bmanice]

Can anyone elaborate on the downfalls of Remote Desktop, with the built in windows application, third party solutions, etc.

intel vPro, supposedly can flash a bios while the computer is off??? wtf?

Thank you, i am currently doing a project for school, and i know you guys always have some great ideas!

[DingleBerries]

I just watched a great podcast on firmware from blackhat lol.. but you want to know about RD downfalls.

http://www.microsoft.com/technet/security/...n/ms05-041.mspx

http://www.windowsecurity.com/articles/Win...l_Services.html

http://www.oxid.it/downloads/rdp-gbu.pdf

Remote desktop is exploitable however great care goes into keeping it safe. Using ssh and other things will greatly reduce you ability to be exploited. There were a few 3rd party tools at one point that were extremely vulnerable to buffer overflow and allowed an attacker the ability to take control a computer running said 3rd party tools. If it was me I would focus on:

What is Remote Desktop

i. When was the first Remote Desktop Client/Server Made

a. Describe it

ii. Where is it being used

a. Corporations

b. Homes

c. Government

iii. History of exploits.

iv. Type of exploits

a. MITM

b. ARP?

c. Buffer Overflow

d. Social Engineering

v. Conclusion

a. What are some ways to secure it

b. Your Opinions

c. ????

d. Profit

[bmanice]

thanks for the response, i really would like to dig into this, it seems like it can be VERY dangerous...

ever hear of ISLLight?

any feedback?