Penetration Testing mailing list archives
Re: gotomypc
From: "R. DuFresne" <dufresne () sysinfo com>
Date: Sat, 9 Mar 2002 16:56:10 -0500 (EST)
And finally, from their own web site: Should you believe it necessary to prevent the GoToMyPC service from accessing your company computers, simply block access to the host poll.gotomypc.com. This will prevent anyone from starting a connection to access any computer inside your firewall. Name: poll.gotomypc.com Address: 63.251.224.177 Thanks, Ron DuFresne On Fri, 8 Mar 2002, kevin mckay wrote:
Has anybody dealt with the services from https://www.gotomypc.com it seems to allow end users to completely circumvent an existing network security infrastructure. The user signs up with gotomypc and establishes a out bound connection through the firewall to a go to my pc server, then there server listens for a connection that is connected to your internal network and the scariest thing is that the listining ports for inbound connections are on a gotomypcserver so how would you even audit?. __________________________________________________ Do You Yahoo!? Try FREE Yahoo! Mail - the world's greatest free email! http://mail.yahoo.com/ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ admin & senior security consultant: sysinfo.com http://sysinfo.com "Cutting the space budget really restores my faith in humanity. It eliminates dreams, goals, and ideals and lets us get straight to the business of hate, debauchery, and self-annihilation." -- Johnny Hart testing, only testing, and damn good at it too! ---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
Current thread:
- gotomypc kevin mckay (Mar 09)
- Re: gotomypc R. DuFresne (Mar 10)
- Re: gotomypc R. DuFresne (Mar 10)
- Re: gotomypc Rainer Duffner (Mar 10)
- <Possible follow-ups>
- Re: gotomypc Ken . Williams (Mar 11)