Cybersecurity Project Research: Remote Access
For the next stage of my cybersecurity project, I need reliable remote access to the desktop computer where I'll be running a Windows VM containing Epic Games Store and Wireshark.
There are a great many programs that can serve this function, so I felt it prudent to do some research before potentially making a huge, time consuming mistake.
So I turned to Microsoft Copilot to start my search, due to its general functionality and the fact that it spits out a list of citations that I can use to check its results.
Search #1: "best free remote desktop apps in terms of security"
This search prompt got the following Copilot results:
Certainly! When it comes to **free remote desktop software**, security is a crucial factor. Let's explore some options that strike a balance between usability and safety:1. **Chrome Remote Desktop**: - **Pros**: - **Free** and easy to set up. - Works well for **individuals** and professionals. - Operates within the **Google ecosystem**. - **Relatively safe** for host computers. - **Cons**: - **Minimal functionality**. - Limited to **Google Chrome**. - Lacks advanced features. - Cannot transfer files between devices. - Not suitable for large-scale businesses. - **How It Works**: Chrome Remote Desktop is a browser extension that allows you to remotely access any computer running the Chrome browser. It's compatible with macOS, Windows, and Android devices. Keep in mind that it's best suited for individual use or occasional access¹.2. **Zoho Assist**: - **Pros**: - Part of the **Zoho ecosystem**. - Offers a variety of **advanced tools**. - Suitable for **IT teams** and professionals. - **Cons**: - Not entirely free (premium solutions available). - **How It Works**: Zoho Assist provides secure remote access and support. While it offers premium features, its free plan is still robust and reliable³.3. **TeamViewer**: - **Pros**: - Completely **free for personal use**. - Widely trusted and reliable. - **Cons**: - Some users find it **resource-intensive**. - **How It Works**: TeamViewer allows remote access across different platforms. It's a solid choice for personal use, but be aware that it may prompt you to purchase a license for commercial purposes⁵.Remember that while these tools offer convenience, always prioritize security by using strong passwords, enabling two-factor authentication, and keeping your software up to date. Choose the one that aligns best with your needs and ensures a safe connection for remote access! 🚀Source: Conversation with Bing, 3/14/2024(1) Best free remote desktop software of 2024 | TechRadar. https://www.techradar.com/best/best-free-remote-desktop-software.(2) Best free remote desktop software 2024 - IT PRO. https://www.itpro.com/mobile/remote-access/368050/best-free-remote-desktop-software-2023.(3) The Best Remote Access Software for 2024 | PCMag. https://www.pcmag.com/picks/the-best-remote-access-software.(4) 20+ Free Remote Desktop Software Tools Choices - Heimdal Security. https://heimdalsecurity.com/blog/free-remote-desktop-software/.(5) 5 Best FREE Remote Desktop Software in 2023 - DNSstuff. https://www.dnsstuff.com/free-remote-desktop-software.(6) Getty. https://media.gettyimages.com/id/1244052182/photo/in-this-photo-illustration-the-zoho-corporation-logo-is-displayed-on-a-smartphone-screen.jpg?b=1&s=612x612&w=0&k=20&c=MKlc1NavyEJe-2FeZNGYgsSvWg7S_yE-0rnSNwIFUvM=.(7) Getty. https://media.gettyimages.com/id/1170968197/photo/the-logo-of-german-tech-firm-teamviewer-stands-in-front-of-the-stock-exchange-in-frankfurt-am.jpg?b=1&s=612x612&w=0&k=20&c=bhJYbdUV-LwzowOkUzgXDAy8wayFoN-PR81jipozjfc=.
Bizarrely, this search resulted in two images being appended to the end of the results, presumably because of the earlier determination that Zoho and TeamViewer were some of the top results.
Going through the sources revealed that Copilot definitely did mix and match the results, although the reasons why it picked the sources it did are pretty obscure, aside from PCMag and TechRadar.
Heimdall Security in particular is eyebrow raising, given the quality of its work. If anything was an AI generated listicle, it was probably that.
Since I'm totally uninterested in using Chrome Remote Desktop for a variety of reasons, I decided to take a different tack.
Search #2: Remote Desktop Apps from WinUtil
Chris Titus' WinUtil is an open-source PowerShell script that automates a variety of Windows configuration tasks. It also incorporates WinGet installation of a wide variety of free software, including remote desktop access applications.
Since this script includes Wireshark as an install option, it makes sense to use this when I get around to configuring my Windows VM. By default, Microsoft Remote Desktop is going to be my fallback option... assuming it's in the ISO I use.
To figure out which of the four options WinUtil offers is the most useful, I gave Copilot the following prompt:
Compare and contrast the following remote desktop applications:Rust Remote DesktopAnyDeskParsecTeamViewerCompare them on the following criteria:-Ability to transfer files-Ease of Use-Hardware requirements-Security
What I got was this:
Certainly! Let's compare and contrast the mentioned remote desktop applications—**Rust Remote Desktop**, **AnyDesk**, **Parsec**, and **TeamViewer**—based on the specified criteria:1. **Ability to Transfer Files**: - **Rust Remote Desktop**: - Rust Remote Desktop is a relatively new open-source project, and its file transfer capabilities might be limited. - **AnyDesk**: - AnyDesk allows easy file transfer between connected devices. - You can drag and drop files directly during a remote session. - **Parsec**: - Parsec primarily focuses on low-latency game streaming and may not have robust file transfer features. - **TeamViewer**: - TeamViewer offers efficient file transfer functionality. - You can share files seamlessly during remote sessions.2. **Ease of Use**: - **Rust Remote Desktop**: - Being open-source, Rust Remote Desktop may have a learning curve for setup and configuration. - **AnyDesk**: - AnyDesk provides a straightforward and user-friendly interface. - It's easy to install and use, making it suitable for both beginners and experienced users. - **Parsec**: - Parsec is designed for gaming, but its simplicity extends to general remote access. - The setup process is straightforward. - **TeamViewer**: - TeamViewer has a polished interface and is widely recognized. - It's user-friendly and suitable for various scenarios.3. **Hardware Requirements**: - **Rust Remote Desktop**: - As an open-source solution, Rust Remote Desktop should run on most systems. - However, specific hardware requirements may vary based on the underlying Rust libraries. - **AnyDesk**: - AnyDesk is lightweight and works well even on older hardware. - It doesn't demand high system resources. - **Parsec**: - Parsec is optimized for low-latency streaming, which requires decent hardware. - For smooth performance, a capable GPU is recommended. - **TeamViewer**: - TeamViewer runs on a wide range of devices, including mobile platforms. - It adapts well to different hardware configurations.4. **Security**: - **Rust Remote Desktop**: - Security depends on the implementation and community support. - Being open-source, it allows transparency and community scrutiny. - **AnyDesk**: - AnyDesk uses strong encryption protocols (TLS 1.2) for secure connections. - It provides session codes and access permissions. - **Parsec**: - Parsec emphasizes low latency over security. - While it encrypts data, it may not be as robust as other options. - **TeamViewer**: - TeamViewer has a solid security track record. - It uses end-to-end encryption and offers features like two-factor authentication.In summary:- **AnyDesk** is user-friendly and efficient for file transfer.- **TeamViewer** is well-established, secure, and versatile.- **Parsec** is ideal for low-latency gaming but may lack extensive file transfer features.- **Rust Remote Desktop** is open-source and promising, but its capabilities are still evolving.Choose the one that aligns best with your specific needs and preferences! 🌟Source: Conversation with Bing, 3/14/2024(1) Teamviewer VS Anydesk - Which is Better Remote Desktop Software?. https://www.youtube.com/watch?v=L4ldNqdKFLM.(2) AnyDesk vs TeamViewer: What's the difference? (Updated). https://www.youtube.com/watch?v=vnBA1fdZRxs.(3) AnyDesk vs TeamViewer | Remote Desktop Comparison in 2022. https://www.youtube.com/watch?v=IwlSfec5H7Y.(4) Let's advise each other on the most efficient remote PC access ... - Reddit. https://www.reddit.com/r/software/comments/ts9b79/lets_advise_each_other_on_the_most_efficient/.(5) RustDesk Alternatives: 25+ Remote Desktop Tools & Similar Apps .... https://alternativeto.net/software/rustdesk/.(6) AnyDesk vs. Parsec vs. TeamViewer Comparison - SourceForge. https://sourceforge.net/software/compare/AnyDesk-vs-Parsec-vs-TeamViewer/.(7) Compare AnyDesk vs. Parsec vs. TeamViewer in 2024 - Slashdot. https://slashdot.org/software/comparison/AnyDesk-vs-Parsec-vs-TeamViewer/.(8) undefined. https://i.imgur.com/FPxAM2w.png.(9) undefined. https://sourceforge.net/projects/tigervnc/files/.(10) undefined. https://play.google.com/store/apps/details?id=com.google.chromeremotedesktop&hl=en_US--.(11) undefined. https://parsec.app/downloads--.
In a confusing turn, a random image was among the search results.
Without even getting into the sources, it's telling that the clear trend is that AnyDesk and TeamViewer are the best options, at least for my intended use case.
Looking further into TeamViewer, Slashdot's link is actually a very good side-by-side comparison of the two pieces of software. In terms of functionality, on paper, TeamViewer looks like the obvious choice.
Unfortunately, I discovered that TeamViewer has some really awful business practices:
For those who didn't watch, TeamViewer requires you to submit a ticket for cancellation 28 days in advance, and if you fail to do so, it will charge you for a year's subscription. This is obviously more of an issue for business customers, but the mindset is highly concerning.
This led me to do one final thing before coming to a decision.
The Ultimate Showdown: First Boot of TeamViewer and AnyViewer
Using Chris Titus' WinUtil, I installed both programs and opened them.
TeamViewer requires an account to use. This means that even if my devices are on the same subnet, some amount of data is being sent out to external servers. That traffic is utterly unnecessary for the execution of the task, and is an extra potential vulnerability and source of traffic that'll make my analysis of Epic Games Store's traffic that much more difficult.
AnyDesk does not require any account, and on startup, just displays a large number that's used for connecting PCs running the AnyDesk client. Minimal, usable, and absolutely what I need to get the job done.
Also, for some reason. the purported file size of TeamVIewer is 200MB, while AnyDesk is supposedly 2MB.
For all these reasons, I will be using AnyDesk for this project.
The Next Steps
For the next stage of the project, I'll be doing the following:
- Familiarizing myself with AnyDesk's best practices for setting up secure connections between systems.
- Assembling the system that'll be running the VM running AnyDesk.
- Determining if the VM can be treated as an isolated device by the router.
The most crucial factor in this project's success is getting router DHCP to properly assign an address to the VM. Without that, Epic Games Store becomes a potential vulnerability on my network, which is not the intended goal.
