[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] OpenVPN Admin Security


  • Subject: Re: [Openvpn-users] OpenVPN Admin Security
  • From: Schlomo Schapiro <openvpn@xxxxxxxxxxxxxxxxxxxx>
  • Date: Tue, 2 Aug 2005 22:40:12 +0200 (CEST)

Hi,

On Tue, 2 Aug 2005, Mike Tancsa wrote:

> Yes, I dont see how this can reliably work. If the end user's computer has
> been trojaned with spyware/malware, what is to prevent the malware from
> overriding / tampering with the client software.

Well, if something integrates deeply into the client OS (Windows, mostly) 
...

> 
> > I can't imagine how to tamper-proof any solution.
> 
> One thing I have been thinking about is to use bootable CDs.  Most of the time
> my clients just want RDP access back to HQ, or the internal intranet via web
> based apps-- both of which could be accommodated via something like Knoppix.
> e.g. burn a CD image for each user that they then fully boot from to get VPN
> access.

Good idea, but how often can you just boot your own OS on somebody else's 
computer ? Oftenly, computers are locked down against this, anyway.

-- 
Regards,
Schlomo

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Warning: require_once(../../../archive_common.php) [function.require-once]: failed to open stream: No such file or directory in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2005-08/msg00021.html on line 205

Fatal error: require_once() [function.require]: Failed opening required '../../../archive_common.php' (include_path='/usr/local/lib/php') in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2005-08/msg00021.html on line 205