Author Topic: LogMeIn Hamachi secure?  (Read 986 times)

0 Members and 1 Guest are viewing this topic.

Offline Wallacey

  • Sergeant at Arms
  • *
  • Posts: 886
    • View Profile
LogMeIn Hamachi secure?
« on: January 21, 2016, 02:51:55 PM »
 My kids use LogMeIn Hamachi so they can play LAN games with another kid.

Basically it's a vpn hosting site.

I'm out of my depth here and becoming a bit concerned about my LAN being compromised.

Am I being paranoid, or is there a real risk with this?

Any advice from the network security gurus around here would be much appreciated  :-*
Whatever

Offline Hardman

  • Big Kahuna
  • *
  • Posts: 11882
  • Single Malt Effect
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #1 on: January 21, 2016, 03:13:15 PM »
Hmm,

It's like anything in that area mate, their security is not bad, the biggest vulnerability is not so much the end nodes (yours and the other kid) but the mediation server that holds the access information. They maintain that their servers are extravagantly hardened and a brief look supports that.

I'd suggest you have little to nothing to worry about, no more so than being on the net in the first place but without knowing what your network looks like hard to say definitively.

There are some possibilities for you, some depending upon who your ISP is, if they are supporting IP V.6 you could force the game playing to use that scheme, if the other kid can, V.6 is proving to be innately more secure because it is not too popular yet, go figure :) You could, depending upon what your network kit is quarantine off the game playing machines from the rest of your LAN with some rigid firewalling. There are actually several ways to do that, some might cost.

If you wanted to give me some details about your network, or for that matter give me Teamviewer access I could give you a more definitive opinion or advice but overall I'd say don't go losing sleep over it :)

Cheers
Politically incorrect?  You betcha!!!  :-)




Offline Wallacey

  • Sergeant at Arms
  • *
  • Posts: 886
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #2 on: January 21, 2016, 03:44:44 PM »
Thanks for the fast reply :)

I find it difficult to communicate using a keyboard and hate talking on a phone, so Teamviewer sounds like the go.

I'll PM you the info.

Thanks again Chris.

 :-*  Tony.

(I'll have my credit card details ready  :P )

Btw, my pc's and network are a dogs breakfast!
« Last Edit: January 21, 2016, 03:48:49 PM by Wallacey »
Whatever

Offline Hardman

  • Big Kahuna
  • *
  • Posts: 11882
  • Single Malt Effect
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #3 on: January 21, 2016, 04:01:17 PM »
:)

Have logged in, sent you a message but doesn't look THAT bad :)

Cheers
Politically incorrect?  You betcha!!!  :-)




Offline Wallacey

  • Sergeant at Arms
  • *
  • Posts: 886
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #4 on: January 21, 2016, 04:04:38 PM »
Good,  I'll let the kids use it without worrying now!

Thanks very much for that  8)
Whatever

Offline Hardman

  • Big Kahuna
  • *
  • Posts: 11882
  • Single Malt Effect
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #5 on: January 21, 2016, 04:16:24 PM »
:)

As I said in the chat have left a logger on your network, just for a few hours, it will self-erase after that but meantime sending me a traffic map.

It looks perfectly ok at a glance but once I have the capture I'll hit it with a penetration test and see if there are any holes - let you know.

You have pretty good protection installed, like I said would not be worrying.

Cheers
Politically incorrect?  You betcha!!!  :-)




Offline Wallacey

  • Sergeant at Arms
  • *
  • Posts: 886
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #6 on: January 21, 2016, 06:19:58 PM »
I appreciate your help, and am curious about the results from the logging session...

If you are ever in Melbourne, we would love to catch up.

 :-*
Whatever

Offline Hardman

  • Big Kahuna
  • *
  • Posts: 11882
  • Single Malt Effect
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #7 on: January 22, 2016, 09:12:50 AM »
Hey,

All looked fine, nothing to worry over.

Don't have any immediate plans to be in Melbourne but probably only a matter of time :)

Cheers
Politically incorrect?  You betcha!!!  :-)




Offline Wallacey

  • Sergeant at Arms
  • *
  • Posts: 886
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #8 on: January 22, 2016, 12:24:25 PM »
Thanks very much mate, the kids are relieved that I am not hassling them about it.

 :-*
Whatever

Offline Hardman

  • Big Kahuna
  • *
  • Posts: 11882
  • Single Malt Effect
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #9 on: January 22, 2016, 01:14:46 PM »
:)

Nada mate.

Cheers
Politically incorrect?  You betcha!!!  :-)




Offline LordDread

  • Sergeant at Arms
  • *
  • Posts: 4066
  • Eat da-shiang bao-tza shr duh lah doo-tze,dong ma?
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #10 on: January 22, 2016, 02:32:31 PM »
yeah i ran it a while back for several months, didnt have an issue.But then that was only between me and 2 others.

Offline Wallacey

  • Sergeant at Arms
  • *
  • Posts: 886
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #11 on: January 23, 2016, 04:46:24 PM »
yeah i ran it a while back for several months, didnt have an issue.But then that was only between me and 2 others.

All good then.

 :-*
Whatever

Offline Hardman

  • Big Kahuna
  • *
  • Posts: 11882
  • Single Malt Effect
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #12 on: June 06, 2016, 05:32:16 AM »
I need to append an update here, old as the thread is.

IP v.6 is no longer regarded as being a secure option just at the moment.

I'm in the midst of a report for a client where almost by chance, and the fact that WireShark has bloody good V.6 decodes, I saw SQL injections being infiltrated into the network as v.6 packets with a subset decode to v.4, if that makes sense.

It was really quite crazy, not a focused attack, just cracker shit floating around in cyberspace but so long as a lot of firewalls do not grok v.6 this sort of attack is likely to become more common.

Just as an aside the site was supposed to be protected by a managed firewall from our major carrier - v.6 ruleset had not even been touched and v.4 was a clusterfuck.

"Managed Services" sounds like cheap insurance to me, all well and good until you make a claim...

Cheers
Politically incorrect?  You betcha!!!  :-)




Offline LogicprObe

  • Sergeant at Arms
  • *
  • Posts: 2252
  • Dudeworld
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #13 on: June 10, 2016, 07:28:08 PM »

I've been having problems with Telstra and they used Logmein to try and adjust my settings!

Offline Hardman

  • Big Kahuna
  • *
  • Posts: 11882
  • Single Malt Effect
    • View Profile
Re: LogMeIn Hamachi secure?
« Reply #14 on: June 11, 2016, 07:41:29 AM »
 :)

Yep, T$ has done a deal with logmein for it to be their default remote access method.

It is actually one of the better ones security wise.

Cheers
Politically incorrect?  You betcha!!!  :-)