Hacker News Reader

Comment by jpmattia | Hacker News Reader

Buried lede imo: TeamViewer having similar issues. Lots of folks claiming it's breached, TV denying it. A lot of potential mischief there, if breached.

https://www.reddit.com/r/technology/comments/4m7ay6/teamview...

View on HN

I have found no indication that my TeamViewer computers were hacked, but after reading this for a few days I finally disabled TV on them last night and I'm looking for other solutions.

After using TeamViewer for over 5 years, I started getting a handful of invites on the service from random names about a month ago (I had never gotten a single invite prior). That alone signaled to me that something may be amiss. I'm afraid that where there is smoke, there's fire.

Have you considered NoMachine NX? I found it to be more or less comparable in terms of performance and settled on it because I wasn't very keen of the centralized TV model.

Yeah, those invites have been going out for a while now, I've been receiving them for the past 2~3 months. I set up a fresh windows 7 VM with the intention of seeing what would come of the requests - but none of them ever came online after accepting.

Yesterday's discussion of a possible TeamViewer hack: https://news.ycombinator.com/item?id=11826431

Wow, thanks for this.

I couldn't find anything in that thread so I'll ask here in case anyone knows: is TeamViewer safe if it's NAT'ed with no open ports, or is there an opportunity when it phones home to compromise the machine?

From what I read someone might of hijacked teamviewers DNS records and pointed them at a server they control. People reported logins during the outage and even though they have TFA enabled. I've never heard of using teamviewer solely on the local network, but even so with an attack like that they can probably just push an infected update and own you that way.

Reply on news.ycombinator.com