From the LogMeIn Security Page
Layered Security Overview
- Authorization of target resource to
users: This is logging in to the LogMeIn site to obtain a list of your machines.
- Authorization of users to gateway: Authorizing you to the gateway.
- Authorization of gateway to host: Authenticating gateway to the target machine.
- Authorization of host to gateway: Reverse of 4.
- 128-to-256 bit SSL end-to-end data encryption: SSL encryption throughout the entire exchange.
- SSL/TLS intrusion detection: Stops people from trying to sniff or hijack your session. I'm guess that it would automatically lock down the host and terminate the connection.
- IP address filtering: Deny / Allow based on ip addresses.
- Denial of service filtering: Stops standard DOS attacks.
- IP address lockout: Multiple failed connection attempts from a single ip? Lockout that ip for an amount of time.
- Authentication and authorization of users to the host: Actually authenticating with the host machine.
- Authentication and authorization of users within the host: Machine verifies the user.
- Detailed auditing and logging including remote control video recording RSA SecurID support: Detailed logs of everything and support for an RSA SecurID.
I've used LogMeIn extensively and never noticed anything I would call "insecure." There are multiple (hopefully different) passwords required to access a remote machine. Everything is SSL encrypted. Heck even the entire website uses a 128 bit certificate.