Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

RustDesk now supports true unattended remote access on Wayland

rustdesk.com

Post reply on HN
Print view View original

41–50 of 176 posts

Re: RustDesk now supports true unattended remote access on Wayland

#41

Post by preisschild »

wooben wrote: post #28
inktype wrote: post #18

RustDesk still does not support encrypted connections when self hosting: https://github.com/rustdesk/rustdesk/issues/3714

Your statement is not entirely accurate. This only applies when using Direct IP Access on local networks, which is off by default. Their justification and invitation to PRs is the final comment [1] on the issue you linked. Why are you leaving this information out of your comment? 1 - https://github.com/rustdesk/rustdesk/issues/3714#issuecommen...

I still think its an essential feature for self-hosting, but they seem to be open to PRs so what is the problem?

Re: RustDesk now supports true unattended remote access on Wayland

#42

Post by bilkow »

applfanboysbgon wrote: post #9
LoganDark wrote: post #4

RustDesk should fix their password requirements: https://github.com/rustdesk/rustdesk/discussions/2888

It's open-source, so just build it yourself with the tiny change. Something this trivial could be done with a 30 second prompt at this point, so there's not even an excuse of "too much effort". I will note that the XKCD password scheme being proposed there is, in fact, completely insecure. A modern consumer GPU can crack "four random English words" in a day. You can argue that it's the user's choice to be allowed to…

> A modern consumer GPU can crack "four random English words" in a day.

Let's run the math:

EFF's long wordlist[0] (the one used by Bitwarden's passphrase generator) has 7776 words, which is about 13 bits of entropy per word (log2(7776) = 12.92). A 4-word passphrase then has 51.7 bits of entropy, meaning there are 2^51.7 possible options for the passphrase, which is 3.66E15 possible options.

For reference, a password with all completely random characters and symbols, for each character you have 70 possibilities, or about 6 bits of entropy. An 8-character completely random password (no words or the usual patterns) then has about 49 bits of entropy, which is less than a 4 word passphrase.

About the time it takes to crack it, assuming you can test an average of 1 password per μs (you probably can't, as passwords are usually stored using key derivation functions[1][2] with work factors tweaked for current hardware) it would take ~116 years to crack it. I usually see 5-passphrase recommended nowadays, which would multiply the required effort by 7776.

Sure, a 16-character random password has a lot more entropy, but it's also a lot harder to interact with (reading, comparing, typing) if you end up needing to, and it's still easier to crack than an 8-word passphrase.

[0] https://www.eff.org/dice [1] https://en.wikipedia.org/wiki/Key_derivation_function [2] https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...

Re: RustDesk now supports true unattended remote access on Wayland

#43

Post by Fidelix »

applfanboysbgon wrote: post #9
LoganDark wrote: post #4

RustDesk should fix their password requirements: https://github.com/rustdesk/rustdesk/discussions/2888

It's open-source, so just build it yourself with the tiny change. Something this trivial could be done with a 30 second prompt at this point, so there's not even an excuse of "too much effort". I will note that the XKCD password scheme being proposed there is, in fact, completely insecure. A modern consumer GPU can crack "four random English words" in a day. You can argue that it's the user's choice to be allowed to…

Did you even check what hash they are using?

Re: RustDesk now supports true unattended remote access on Wayland

#44

Post by thatfunkymunki »

preisschild wrote: post #40
dj0k3r wrote: post #22

Earlier quoted context omitted.

Tailscale, or any encrypted mesh overlay is perfect for this. Infact I prefer it that way. Rustdesk can do what it does best at its core.

I disagree, modern software should make encrypted connections over something like HTTP3 or QUIC directly so true secure end to end connectivity works. This would make VPN software such as tailscale obsolete.

agreed, zero-trust solution with proper endpoint security and PKI is superior to transport encryption and insecure protocols

Re: RustDesk now supports true unattended remote access on Wayland

#45

Post by zuzululu »

aspbee555 wrote: post #26

RustDesk works so much better and easier than vnc and other vendored solutions. No need to open ports, no need for vpn, it just works, no account BS, no vendor lock in BS. I have used RustDesk for years, also run my own lookup/relay server so I do not need to rely on the public lookup server While everything else gets enshitified RustDesk just keeps getting better

wonder if it can support gaming and sounds too ?

Re: RustDesk now supports true unattended remote access on Wayland

#46

Post by zuzululu »

amelius wrote: post #5
zuzululu wrote: post #2

so this means I can be on a vacation, turn on my ubuntu desktop remotely, login and control it ? I have a strong need for this as my desktop is also a server

You can already do this with VNC or Xpra (the latter is a screen/tmux for graphical applications).

so whats the edge that rustdesk that offers ? gaming ?

Re: RustDesk now supports true unattended remote access on Wayland

#48

Post by wavemode »

applfanboysbgon wrote: post #9
LoganDark wrote: post #4

RustDesk should fix their password requirements: https://github.com/rustdesk/rustdesk/discussions/2888

It's open-source, so just build it yourself with the tiny change. Something this trivial could be done with a 30 second prompt at this point, so there's not even an excuse of "too much effort". I will note that the XKCD password scheme being proposed there is, in fact, completely insecure. A modern consumer GPU can crack "four random English words" in a day. You can argue that it's the user's choice to be allowed to…

> A modern consumer GPU can crack "four random English words" in a day.

This is just completely false.

Re: RustDesk now supports true unattended remote access on Wayland

#49

Post by applfanboysbgon »

bilkow wrote: post #42
applfanboysbgon wrote: post #9

Earlier quoted context omitted.

It's open-source, so just build it yourself with the tiny change. Something this trivial could be done with a 30 second prompt at this point, so there's not even an excuse of "too much effort". I will note that the XKCD password scheme being proposed there is, in fact, completely insecure. A modern consumer GPU can crack "four random English words" in a day. You can argue that it's the user's choice to be allowed to…

> A modern consumer GPU can crack "four random English words" in a day. Let's run the math: EFF's long wordlist[0] (the one used by Bitwarden's passphrase generator) has 7776 words, which is about 13 bits of entropy per word (log2(7776) = 12.92). A 4-word passphrase then has 51.7 bits of entropy, meaning there are 2^51.7 possible options for the passphrase, which is 3.66E15 possible options. For reference, a password…

[flagged]
Post reply on HN