RE: CRIME GoToMyPC?

From: Dorning, Kevin E - DI-3 (kedorning@private)
Date: Thu Oct 24 2002 - 13:41:55 PDT

  • Next message: brvarin@private: "Re: CRIME Ambiguities in TCP/IP - firewall bypassing"

    The problem with services like GoToMyPC is that they allow clients on a business network (supposedly protected) to open up and maintain an http connection with the capability of accessing that system and any other system that it has access to on the internal network.  We have banned such services because they provide a back door into our network that can be used at any time by the person who set it up or others who know about it.  The security of the GotoMypc site might be great, but the basic concept of the service violates the security and integrity of any network that allows it's use.
    
    K.D>
    
    -----Original Message-----
    From: Wil Cooley [mailto:wcooley@private]
    Sent: Thursday, October 24, 2002 12:05 PM
    To: CRIME
    Subject: CRIME GoToMyPC?
    
    
    
    Does anyone know anything about this service/product?  I'm looking
    around on their web site and they have lots of claims of being secure,
    aside from the fact that they have the PC tunnel OUT THROUGH the
    firewall, which I guess probably irks a lot of SAs.  Frankly, it scares
    the hell out of me, but I've got a customer who is actually using it and
    they really like the convenience (and they claim PC Anywhere is too slow
    to be used, given that some of them are coming in on a dial-up).
    
    Wil
    -- 
    Wil Cooley                                 wcooley@private
    Naked Ape Consulting                        http://nakedape.cc
    * * * * Linux, UNIX, Networking and Security Solutions * * * *
    QCSNet                                     http://www.qcsn.com
    * * * * T1, Frame Relay, DSL, Dial-up, and Web Hosting * * * *
    



    This archive was generated by hypermail 2b30 : Thu Oct 24 2002 - 14:37:20 PDT