Logmein or Hamachi2?

[Gillbot]

Spurred by this thread, I'm trying to determine what is "better" for using wifi or basically any untrusted network like a hotel or something. My concern with Logmein is the initial login process.

Couldn't they just steal your password and then have full access to your home systems?

I've never used Hamachi2 so I have no idea how that works but I suspect it's "better" since it's a knockoff of corporate VPN setups.

 

[lxskllr]

You're on https the whole way. I suppose anything's possible, but I think it would be HIGHLY unlikely that would get broken from a commercial hotspot. Maybe from a "free wireless" honey pot, but still unlikely imo.

 

[KeithP]

What about using the free proxy service at http://www.hidemyass.com/proxy/# and clicking on SSL encryption?

If that doesn't work for you, I know Logmein has a one time password option. Basically, you print out a list a passwords that you keep with you and each one is only good for a single use. As long as you keep the printed list safe, you shouldn't have a problem.

-KeithP

 

[Gillbot]

What about using the free proxy service at http://www.hidemyass.com/proxy/# and clicking on SSL encryption?

If that doesn't work for you, I know Logmein has a one time password option. Basically, you print out a list a passwords that you keep with you and each one is only good for a single use. As long as you keep the printed list safe, you shouldn't have a problem.

-KeithP

Where is this option in Logmein?

My main concern is the typical "honey pot" because many are getting pretty sneaky with their setups. I've seen some pretty sophisticated setups out there where they basically replicate a real wireless access point and you can't differentiate between a bad or good one. One setup I saw had a machine on the hotel's wired network with a wireless access point replicating the hotel's wireless access point and all it did was record traffic. Everything worked as it should including the hotel's log in system and aside from the one extra hop, most would never know that machine was there stealing their info.

 

[KeithP]

Where is this option in Logmein?

After you first sign-in, and are looking at your list of computers...in the right portion of the screen, you should see your email address listed (your account name). If you click on that, a drop down menu pops up, the first item should say "Account (youraccountname)", select it.

That should bring you to another page with several tabs, one of which is "Security", click that and you should be good to go. There are some other security options there as well.

Also, I just became aware of PhoneFactor (http://www.phonefactor.com/solutions/logmein)

With this product, after you login to your account but before you have actual access, a call is placed to your phone which you have to respond to before you can access the account. It looks interesting but I just stumbled across it so I don't know much about the company/product (it is 3rd party).

-KeithP

 

[Gillbot]

The password list option will work, but the phone factor one seems nice as well if it's trustworthy. THANKS!