Remote desktop - safe? Local network only?

[T0bias]

Hi,

I am considering to use remote desktop for controlling my HTPC with my phone. I will only be using remote desktop when I'm on the same network as the HTPC.

My question is if this is safe? Do I risk anything by having the HTPC turned on most of the time with remote desktop enabled?

Is it correct that the computer won't be accessible/visible to computers outside my network, as long as I don't take any steps to enable remote access outside my network?

Thanks 🙂

 

[mikeymikec]

RDP as a local network only setup should be pretty safe, but bear in mind that there's always a way in to a local network, so if there's anything you very much want to keep secure on the HTPC, don't have it as remote-capable.

 

[T0bias]

RDP as a local network only setup should be pretty safe, but bear in mind that there's always a way in to a local network, so if there's anything you very much want to keep secure on the HTPC, don't have it as remote-capable.

Thanks for your reply 🙂

There is nothing important on the HTPC itself, but I have other computers on the network where I have more important stuff.

However, if anyone from the outside did get into the local network, why would it matter if the HTPC was remote-capable or not?

 

[mikeymikec]

If it isn't remote-capable, then there's no direct path to accessing all its functions through one convenient interface.

Every service (e.g. RDP, http, ftp, smb, etc) that a machine hosts on a network is a weakness in its security. If a machine doesn't host any services on the network, then the only ways into it are either through physical means (someone sitting at the machine, or coercing the user to connect some harmful hardware), or through software vulnerabilities/backdoors, or of course the most common method, duping the user into doing something stupid.

 

[T0bias]

If it isn't remote-capable, then there's no direct path to accessing all its functions through one convenient interface.

Every service (e.g. RDP, http, ftp, smb, etc) that a machine hosts on a network is a weakness in its security. If a machine doesn't host any services on the network, then the only ways into it are either through physical means (someone sitting at the machine, or coercing the user to connect some harmful hardware), or through software vulnerabilities/backdoors, or of course the most common method, duping the user into doing something stupid.

Okay, I see 🙂

What confused me was this guide http://www.howtogeek.com/175087/how...remote-desktop-on-windows/?PageSpeed=noscript where they mention

"There are a lot of bots constantly scanning the internet for vulnerable PCs running Remote Desktop, so don’t underestimate the importance of a strong password"

despite that the guide appears to be for local network setup only.

Do you think it would be safer to use TeamViewer?