Re: TS/3389 risk on Internet

[Lennart Sorth <Lennart.Sorth () uni-c dk>]

net sec wrote:
> Does anyone know if the login/password 
> is sent in clear text for TS authentication?

Well, its certainly sent unencrypted, if not clear text.

You can install Cygwin on the DC, and tunnel tcp-3389 through
a SSH connection. This way the security is provided by, and
can be maintained by means of the Cygwin SSH implementation.

And if you use ssh compression, it is usually even faster
than doing the TS directly.


Best regards

Lennart Sorth
UNI-C
Denmark