[colug-432] TeamViewer

[William Hooper]

On Nov 1, 2013 11:26 AM, "Rick Troth" <rmt at casita.net> wrote:

> Then I happened to notice an unexpected TCP connection.  It traced back
to TeamViewer (their servers).  Not good!  I found the TV processes
running, killed them, removed the files, and deleted the package.  (Less
emotion might have left more stuff for forensics, but I do have a backup of
some of that.)
>

I think you will find this connection is used so that TeamViewer can act as
a tunnel broker between two users. This allows one to be able to connect to
a remote machine without having to worry about the firewalls in between.
You might be interested in the "Creation of a Session and Types of
Connections" section of
http://www.teamviewer.com/images/pdf/TeamViewer_SecurityStatement.pdf .

Convenient for the busy tech support provider as well as the busy bad guy.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.colug.net/pipermail/colug-432/attachments/20131104/b8110ea4/attachment.html