PDA

View Full Version : Remote PC control through logmein... safety issues?



samir_raut88
Jul 18, 2006, 01:30 PM
I have the logmein software installed and ready to use but every time I use it to connect my laptop at home, I feel somewhat unsafe.

How reliable is Logmein (www.logmein.com) itself? Does anyone know? Someone told me that their security certificate is 'not quite acceptable'.

What other options do we have for a remote PC control (for free)?

Logmein saftely issues.. Rumors or critical info.

Curlyben
Jul 18, 2006, 01:40 PM
As it 256 bit encrypted I feel its about as secure as you can get without going for a whole VPN implementation.
What is more of a security risk is the browser that you are running it in, especially IE, your level of OS patching and your other installed security apps (Anti Virus, Anti spyware and firewall)

phr0ze
Jul 18, 2006, 04:02 PM
Any program you install on your computer has the potential give someone access to the computer. The software can even give access through firewalls. Only download and run software from companies and urls you completely trust.

But in all no one is going to be able to break that encryption, but some employee at that company can probably also access your PC.

samir_raut88
Jul 18, 2006, 04:30 PM
Thanks for the answer guys.
Well, if 256 is the best I can get then so be it.
I find this awesomely freakishly useful, so I'm all over logmein.

I wasn't sure about the encryption... I will be hoping that no one breaks in.

Btw, what about the virus/spyware issue. It would be great to help people I know but in case of virus/spyware issues in their computers, am I prone to any part of it?

Thanks people!

cajalat
Jul 18, 2006, 06:28 PM
You can have 1024 bit encryption but that won't do you any good if LogMeIn is in the middle of your connection because they can still see your data if they choose to do so. There is a mode within the LogMeIn service that establishes an encrypted Tunnel between your PC's but I believe you have to specifically enable it. I don't know enough about how the connections actually are established in this mode but it is worth a look.

So look into that feature if you really want encryption only between the two end points (vs. having to go to LogMeIn servers as the meet location for terminating your encryption).

I personally do not recommend such services if you're trying to access your work computer from home. Use your company's standard remote access solution. With today's VPN solutions coupled with Remote Desktop for windows (other OS's have similar features) there really isn't anything offered by 3rd party services (such as LogMeIn or GoToMyPC) that RDP gets you. Also keep in mind that the last thing you want is a lawsuit on your hand because someone discovered a whole in LogMeIn which ended up compromising your company computers through your connection. If on the other hand you want to access your own PC at home from elsewhere then the risk is completely up to you.

Casey

helper_robot
Jul 19, 2006, 07:47 AM
You shouldn't be concerned at all. The connections with LogMeIn are very very secure, as people have mentioned before. And anyway, your "target" computer that you log into is protected by a password, so I don't understand what phr0ze is talking about when he says that employees would be able to access your computer. What would they gain by doing that anyway?

Logmein has really great forums on their websites. You should check them out.

samir_raut88
Jul 19, 2006, 07:56 AM
Oh sure. I should check out their forums, then.
I am not too sure what phroze is talking about. But thanks for all the help.

helper_robot
Jul 19, 2006, 08:00 AM
No problem. I don't get why Logmein employees would be like meddling within their customers' computers. It behooves them just to make a good solid product that people would latch onto

RickJ
Jul 19, 2006, 08:10 AM
I have used the free version of logmein for quite some time now. I have 5 computers on 24/7 and always hooked up. I've not had a single problem or issue.

I love them and tell everyone I know about them. One of the most awesome free apps I've ever run across.

PS. I did a good evaluation of most of the popular remote access apps. Logmein was the only one that had a good free version.

I hear a lot of ads for gotomypc.com but GEE WHIZ they cost an arm and a leg.

From what I've seen, the only reason to consider the paid version of logmein is to do file transfers, but the workaround to that is to just email stuff to yourself from the remote to the computer you're on at the time.

I have no affiliation with them or a way to benefit from "touting" them, but again, it's one of those finds that has been priceless. I use it many times every single day.

samir_raut88
Jul 19, 2006, 10:45 AM
Yea man. I purely enjoy the logmein as well.

Just wanted to confirm with you- out of excitement and curiousity.. so, I could use logmein for FREE* with a limited remote contorl ONLY facility. Which is fine by me!
Now, I think I feel much secured with logmein. This thing is outrageously good!

* Totally free

RickJ
Jul 19, 2006, 11:28 AM
Yep. Totally free. For the first 30 days or so you'll have file transfer capability while they try to tease you into paying for it... but I never took the hook - and am still on the freebie. I just email myself when I need a file from a remote.

There may be other good features with the paid version, but gee whiz, the freebie version does everything I need - so I haven't even looked into the "benefits" of the paid version.

ScottGem
Jul 19, 2006, 12:17 PM
I've also been using it for several months. No security issues have come up. It works great for accessing my home PC from work (I wouldn't go the other way though, without your IT people's permission).

I just finished a session. I had a file on a USB drive that I was editing here at work during my lunch hour. I then e-mailed it to a home e-mail address. I logged in through logmein, opened the e-mail and saved the file, then opened a newsletter file that was linked to the file. I PDFed the newsletter and sent it out for approval.

samir_raut88
Jul 19, 2006, 12:45 PM
Damn this is good.
I wasn't 100% sure about this being totally free or about the security issues.
Now, I'm all over it. Thanks a lot guys.
Luks like a lot of people have been totally using this. Abusing it! Heck yeah!

helper_robot
Jul 20, 2006, 06:08 AM
I have no idea what people mean about the safety certificate. I figure if it works it works!

RickJ
Jul 20, 2006, 06:18 AM
Lots of things that don't have a certificate "work" but leave you very vulnerable to a variety of attacks.

When using an app that opens your computer up to outside connections, you must be fully confident that you are secure - otherwise you're in a crap-shoot and taking a big risk.

Secwrn
Nov 23, 2007, 03:45 AM
The security issue applies to all companies like LogMeIn, not just to LogMeIn.

Windows itself is not very secure. There are security patches released almost weekly, many of which are meant for the browser that you use to facilitate the remote solution.

The service looks like this:

Remote PC ----- LogMeIn ----- Remote PC

You have 3 critical points.

Even if you completely and totally trust LogMeIn, any disgruntled employees it may have had, certificates, etc. you still ned to worry about the 2 remote computers. There are plenty of worms, rootkit type, or just plain keystroke capture viruses that can compromize a Windows PC, harvesting accounts and passwords.

Not trying to shoot down the service, but be aware that security in the Windows computing world is akin to standing in the middle of a bar parking lot at 2:00am, trying to pick a fight with anyone who walks by. You will certainly get challengers and a few of them will win.