Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: TS/3389 risk on Internet |
|---|---|
| Date: | Mon, 1 Nov 2004 17:08:15 -0600 |
Lennert Sorth:
Well, its certainly sent unencrypted, if not clear text.
False, false, false! Please educate yourself before posting. Windows 2000: http://www.microsoft.com/windows2000/techinfo/howitworks/terminal/rdpfan dp.asp Default configuration is 56-bit, you can set this to 128-bit. Windows XP: http://www.microsoft.com/windowsxp/using/mobility/default.mspx Default configuration is 128-bit Windows Server 2003 http://www.microsoft.com/windowsserver2003/technologies/terminalservices /default.mspx Default configuration is 128-bit, and there is FIPS-encryption level available (for even more security) The encryption level can be configured on the server.
From the RDP-Tcp Properties on Windows 2000 Advanced Server:
"Encryption level: Medium All data sent between the client and the server is protected by encryption based on the server's standard key strength" That is the default setting!
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: The business/marketing of pen-testing., Randy Golly |
|---|---|
| Next by Date: | RE: SAP Pen-Test, Rob Shein |
| Previous by Thread: | Re: TS/3389 risk on Internet, Davide Carnevali |
| Next by Thread: | RE: TS/3389 risk on Internet, Todd Towles |
| Indexes: | [Date] [Thread] [Top] [All Lists] |