• 1 Post
  • 133 Comments
Joined 1 year ago
cake
Cake day: June 7th, 2023

help-circle








  • VNC might have seen improvements over the years, but last time tried it, it didn’t handle high resolution/detail well at all. RDP can stream practically any media in close to real time, as to where VNC really broke down if you tried to change too much of the screen at once. Ideally, there’d probably be a new open screen sharing standard that used modern encoding and decoding to allow for high bandwidth connections smoothly. Moonlight gets close, but isn’t really designed as an RDP/VNC replacement.


  • It should stop issues with full device theft as well, if done correctly, because if secure boot isn’t on and working, it will refuse to give the key. Which means, if it was setup correctly, the computer cannot be accessed without know the users name and password. This is the general accepted stack for Microsoft’s BitLocker. It becomes completely transparent to the user, but puts a decent blocker to access in cases of theft. There are ways around it like freezing RAM or packet sniffing an external TPM, but those are high level attacks.


  • The point is to have the system automatically unlock without the need for a boot password. This provides decent security if secure boot is enabled, but requires very little from the user. It isn’t a stopper for high threats, but a simple theft will mean the data is safe. It also ensures that if the drive is separated from the host machine, it is useless without a copy of they key. It doesn’t stop all threats, but stops a lot of them, and all of the most common.


  • M365 is doing away with all legacy authentication, do not be surprised if IMAP is completely unusable in the next 12 months. If you simply want to keep a copy of everything, a store and forward SMTP proxy would probably be the solution, so all email going to your domain would hit that first, then send off to M365.