Link to home
Start Free TrialLog in
Avatar of wfcrr
wfcrrFlag for United States of America

asked on

remotetopc.com - how secure is it?

I finally have had it with LogMeIn sticking it to us.  I tried Splashtop as a replacement and that works fine, but weirded me out, being a Chinese funded company.  Finally landed on RemoteToPC and that seems to work fine, and, it is a US based company.  Can any of you tell how secure it is?  I am using the 2 factor authentication, but wonder about other area that I have no idea how to check.
Avatar of Dr. Klahn
Dr. Klahn

"US based company" merely means that the company is registered in the US.  The ownership could be anybody, including China.

https://www.breitbart.com/tech/2020/02/12/report-cia-secretly-read-encrypted-messages-of-allies-enemies-during-cold-war/

If any traffic at all is going to their servers, it should be considered insecure.  Run Process Monitor and parse the log for TCP connects on both sides of a session to see where the software is connecting to.

But down at fundamental level:  As with any program, if you have not personally read through the code, and compiled it yourself, and confirmed every time you run it that the file hash matches what it was when the program was compiled, then it must be considered insecure from a strict standpoint.
If you're doing this with remote users in multiple different locations, then you don't have much choice but to use external services such as remotetopc.

If you're working on local computers in your corporation, especially domain joined system, it's a bit stupid to use these 3rd party tools.
ASKER CERTIFIED SOLUTION
Avatar of btan
btan

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial