5 ms·

This gets posted again and again, and every time I look at it, the code quality is absolutely terrible. Remote access software is by design a complete internet-

This gets posted again and again, and every time I look at it, the code quality is absolutely terrible. Remote access software is by design a complete internet-accessible backdoor to your system, I will never use one that is written as shoddily as this one.

davidmurdoch 4y ago
It's written in Rust, it can't be terrible! /s
sambull 4y ago
whats the commercial options code quality looking like?
- proto_lambda 4y ago
  Maybe not much better, but that's hardly the only alternative
  - jaden 4y ago
    Could you share what you use?
- qbasic_forever 4y ago
  Ssh x11 forwarding is at least supremely battle tested over decades.
  - TrueDuality 4y ago
    Yup and unfortunately a feature that Wayland decided wasn't worth preserving.
    - oynqr 4y ago
      Waypipe exists.
rspoerri 4y ago
Are there any other remote desktop services what work out of the box to access servers behind firewalls and has clients for mobile and all desktop devices? not to criticize your answer, i just have not found any viable alternative that is free to use for all use cases.
summm 4y ago
Also note their persistent refusal to implement TLS for their web access. This attitude alone tells me never to trust this project ever, even when they finally should use TLS. Sadly there is no other FOSS out there that combines remote support with good NAT traversal. Existing remote access tools such e.g. VNC all do not offer NAT traversal and are incredibly hard to setup. All FOSS web/phone conference tools offering screen sharing refuse to implement transferring Cursor/Keyboard control. Probably because it is not so easy, but mostly, I guess, out if fear for diffuse security problems. Too bad people then will be compelled to use this absolute mess...
- ibeckermayer 4y ago
  I work on the Desktop Access feature for Teleport: https://goteleport.com/docs/desktop-access/getting-started/ https://goteleport.com/docs/desktop-access/getting-started/ The tool itself is open core: https://github.com/gravitational/teleport https://github.com/gravitational/teleport Most of the desktop access stuff is open source. (The only desktop related thing that's proprietary is our tool that allows for access to machines not connected to Active Directory). A sizeable chunk of the desktop access code is even Written In Rust™: https://github.com/gravitational/teleport/tree/master/lib/srv/desktop/rdp/rdpclient https://github.com/gravitational/teleport/tree/master/lib/sr...!
- dns_snek 4y ago
  Are you talking about their website, rustdesk.com? It looks like they have HTTPS version of "rustdesk.com" but don't redirect to it automatically. Do you have any links to issues/interactions you find concerning? I've been evaluating different remote desktop tools recently and I'd certainly like to know about any other red flags.
  - dns_snek 4y ago
    I think I found the issue: https://github.com/rustdesk/rustdesk/issues/856 https://github.com/rustdesk/rustdesk/issues/856 Furthermore they seem to share servers with what seems like an unrelated ecommerce website: https://github.com/rustdesk/rustdesk/issues/2712 https://github.com/rustdesk/rustdesk/issues/2712 It doesn't seem like they take security all that seriously.

davidmurdoch 4y ago

It's written in Rust, it can't be terrible! /s

sambull 4y ago

whats the commercial options code quality looking like?

proto_lambda 4y ago
Maybe not much better, but that's hardly the only alternative
- jaden 4y ago
  Could you share what you use?
qbasic_forever 4y ago
Ssh x11 forwarding is at least supremely battle tested over decades.
- TrueDuality 4y ago
  Yup and unfortunately a feature that Wayland decided wasn't worth preserving.
  - oynqr 4y ago
    Waypipe exists.

rspoerri 4y ago

Are there any other remote desktop services what work out of the box to access servers behind firewalls and has clients for mobile and all desktop devices? not to criticize your answer, i just have not found any viable alternative that is free to use for all use cases.

summm 4y ago

Also note their persistent refusal to implement TLS for their web access. This attitude alone tells me never to trust this project ever, even when they finally should use TLS. Sadly there is no other FOSS out there that combines remote support with good NAT traversal. Existing remote access tools such e.g. VNC all do not offer NAT traversal and are incredibly hard to setup. All FOSS web/phone conference tools offering screen sharing refuse to implement transferring Cursor/Keyboard control. Probably because it is not so easy, but mostly, I guess, out if fear for diffuse security problems. Too bad people then will be compelled to use this absolute mess...

ibeckermayer 4y ago
I work on the Desktop Access feature for Teleport: https://goteleport.com/docs/desktop-access/getting-started/ https://goteleport.com/docs/desktop-access/getting-started/ The tool itself is open core: https://github.com/gravitational/teleport https://github.com/gravitational/teleport Most of the desktop access stuff is open source. (The only desktop related thing that's proprietary is our tool that allows for access to machines not connected to Active Directory). A sizeable chunk of the desktop access code is even Written In Rust™: https://github.com/gravitational/teleport/tree/master/lib/srv/desktop/rdp/rdpclient https://github.com/gravitational/teleport/tree/master/lib/sr...!
dns_snek 4y ago
Are you talking about their website, rustdesk.com? It looks like they have HTTPS version of "rustdesk.com" but don't redirect to it automatically. Do you have any links to issues/interactions you find concerning? I've been evaluating different remote desktop tools recently and I'd certainly like to know about any other red flags.
- dns_snek 4y ago
  I think I found the issue: https://github.com/rustdesk/rustdesk/issues/856 https://github.com/rustdesk/rustdesk/issues/856 Furthermore they seem to share servers with what seems like an unrelated ecommerce website: https://github.com/rustdesk/rustdesk/issues/2712 https://github.com/rustdesk/rustdesk/issues/2712 It doesn't seem like they take security all that seriously.