News for hackers. Stuff that matters.

A comment on IronRDP: a Rust implementation of Microsoft's RDP protocol. Parent comment

Re:IronRDP: a Rust implementation of Microsoft's RDP protocol by KennyBlanken on Friday March 21, 2025 @05:04PM (#43440812)
In the several decades since, nothing has stopped them from coming out with a "RDP v2."

I trust SSH to be public-facing. Don't have the right private key? Pound sand. You're not getting in.

I trust RDP to allow someone to break into my machine, get admin privileges, and infect / bot it, likely in under an hour.

Smart cards rolls eyes

[ Parent | on HN ]
Re:IronRDP: a Rust implementation of Microsoft's RDP protocol by joking on Saturday March 22, 2025 @04:40AM (#43444391)
That’s why you have an vpn or the rdp gateway instead of exposing the machines directly to internet.
[ Parent | on HN ]
Re:IronRDP: a Rust implementation of Microsoft's RDP protocol by Nextgrid on Saturday March 22, 2025 @08:12AM (#43445214)
Smart cards is just certificate-based authentication really.

Microsoft did indeed fail hard - if they just made certificate authentication easy to configure on stand-alone machines like SSH key authentication is (and allow to keep the key as a file if desired, instead of in a smart card), a lot of pwnage would've been avoided.

[ Parent | on HN ]
Re:IronRDP: a Rust implementation of Microsoft's RDP protocol by p_ing on Saturday March 22, 2025 @10:17AM (#43445754)
You can set up RD Gateway to leverage MFA.

https://learn.microsoft.com/en-us/entra/identity/authenticat...

[ Parent | on HN ]
Re:IronRDP: a Rust implementation of Microsoft's RDP protocol by nijave on Saturday March 22, 2025 @03:57PM (#43448180)
Iirc you can enable Remote Desktop and block public access and connect over an SSH tunnel. Newer versions of Windows include an SSH server.
[ Parent | on HN ]