Re: gotomypc

From: R. DuFresne (dufresneat_private)
Date: Sat Mar 09 2002 - 13:56:10 PST

  • Next message: Rainer Duffner: "Re: gotomypc"

    And finally, from their own web site:
    
    	 Should you believe it necessary to prevent the GoToMyPC
             service from accessing your company computers,
             simply block access to the host poll.gotomypc.com.
    	 This will prevent anyone from starting a connection to access any
    	 computer inside your firewall.
    
    
    
    Name:    poll.gotomypc.com
    Address:  63.251.224.177
    
    
    Thanks,
    
    Ron DuFresne
    
    
    On Fri, 8 Mar 2002, kevin mckay wrote:
    
    > Has anybody dealt with the services from https://www.gotomypc.com it
    > seems to allow end users to completely circumvent an existing network
    > security infrastructure.
    > 
    > The user signs up with gotomypc and establishes a out bound connection
    > through the firewall to a go to my pc server, then there server listens
    > for a connection that is connected to your internal network
    > and the scariest thing is that the listining ports for inbound
    > connections are on a gotomypcserver so how would you even audit?.
    > 
    > 
    > 
    > 
    > __________________________________________________
    > Do You Yahoo!?
    > Try FREE Yahoo! Mail - the world's greatest free email!
    > http://mail.yahoo.com/
    > 
    > ----------------------------------------------------------------------------
    > This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    > Service. For more information on SecurityFocus' SIA service which
    > automatically alerts you to the latest security vulnerabilities please see:
    > https://alerts.securityfocus.com/
    > 
    
    -- 
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
            admin & senior security consultant:  sysinfo.com
                            http://sysinfo.com
    
    "Cutting the space budget really restores my faith in humanity.  It
    eliminates dreams, goals, and ideals and lets us get straight to the
    business of hate, debauchery, and self-annihilation."
                    -- Johnny Hart
    
    testing, only testing, and damn good at it too!
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Sun Mar 10 2002 - 09:30:50 PST