<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
FYI, TeamViewer may provide an attack vector. <br>
<br>
I installed TeamViewer (on OpenSUSE). This is a popular desktop
sharing tool with broad platform coverage. One of my team-mates was
using it and we have regular need to do DT sharing with customers.
(There are other tools/methods we use, but like I said ... TV is
popular with some.) <br>
<br>
Then I happened to notice an unexpected TCP connection. It traced
back to TeamViewer (their servers). Not good! I found the TV
processes running, killed them, removed the files, and deleted the
package. (Less emotion might have left more stuff for forensics,
but I do have a backup of some of that.) <br>
<br>
A little Googoo gruntwork turns up ... yes ... TV is used by the bad
guys. I am omitting some details. Anyone know more about it and
care to share? In any case, <u>you have been warned</u>. <br>
<br>
To date, the safest desktop sharing tool in my doctor's bag is VNC.
It instantiates a virtual desktop to which applications voluntarily
connect. Yes, you *can* use VNC to hit the physical
display/keyboard, and for all I know that is more popular now. But
traditionally VNC was virtual by default (and nicely boxed). <br>
<br>
-- R; <><<br>
<br>
<br>
<br>
</body>
</html>