Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm going to be out of the country for a while with my underpowered laptop, so, I wanted to get remote desktop working (windows 7).

I know I can forward ports and have it working, but what I'm wondering is:

  • Is remote desktop secure?
  • Is there any way I can turn my computer off AND ON over remote desktop?
  • Will I get hacked if I forward ports to remote desktop?

Any suggestions are welcome.

share|improve this question

2 Answers

up vote 3 down vote accepted

You can turn off the computer the command line way - with shutdown.exe, or hitting Ctrl+Alt+End, then using the shutdown option there. turning it back on will require something like wake on lan and waiting for the system to boot up

RDP is fairly secure - 128-bit RC4 encryption by default, so there's less chance of someone listening in. On the other hand, to reduce the risk of brute force attacks you should probably use a strong password and a limited user account if possible. Also remember that Administrator is in the remote access group by default. You want to remove it from this group using local policy editor, otherwise its username/password is another brute force attack target and you want to reduce the target surface area as much as possible.

As for 'will i be hacked' - it depends on the hacker. For most part tho, RDP is reasonably safe, but that would depend on what vulnerabilities are out there.

share|improve this answer
Very good answer. Thank you very much. – Dhaivat Pandya May 11 '11 at 22:51

Wanted to add this is a comment, but have no privileges to do so... here it is:

You will run in trouble if your external IP address is assigned via DHCP. If it is static - fine, but how you would know if the external IP changes. I am not entirely sure how secure the authentication process is (not a Windows guy, not using RDP). For example: imagine you are in a hotel and use their unsecured Wi-Fi. I would test it first - try Cain&Abel and see if you can catch your login credentials.

Cheers

share|improve this answer
Figured that out :) I use DynDNS. – Dhaivat Pandya May 11 '11 at 22:51

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.