• Re: The risks of a remote session by a software vendor.

    From ...winston@winstonmvp@gmail.com to alt.comp.os.windows-10,alt.comp.os.windows-11 on Fri Jul 4 16:12:51 2025
    From Newsgroup: alt.comp.os.windows-11

    micky wrote:
    I bought something that requires software. It installed and ran fine
    the first time on the no-longer in use win10, but only displays a little
    blue circle for 4 to 60 seconds, usually 4, on my new, main, win11
    laptop.

    I've written to the vendor, explained everything I did to debug and sent
    him copies of their error log.

    1) SO WHY DOES HE want to do a remote session? Is there debugging software that can be superimposed on an unmodified program that will
    give more information than the log does? That's the only reason I can
    think of where a remote session is better than the log****.

    2) Precautions:
    If I'm watching my monitor, can they be downloading things in background without my seeing?

    Maybe.

    All of my sensitive information, bank account numbers, userids, and
    passwords are either in one email mailbox with an irrelevant name, or
    those involving money are in two files password protected by
    Libreoffice, and one other email in the outbox. Should I move all
    these to external storage and then disconnect that before I allow the session?

    Not a good idea to store your personal security needed content in your
    email mailbox.

    Can they read a LibreOffice password**-protected file without the
    password?. **Which is only 5 letters long, because it was meant to
    stop the average thief who stole my laptop when I travel?


    No

    I have a few little bur real reasons to think this guy is not legit,
    which I can explain if they are not considered off-topic.

    If concerned, uninstall the software and move on.
    No software, no need for software vendor to remote in to your device.


    **** Seems to me the log should be enough and they won't learn anything
    from watching it run on my computer. If the log is not enough they need
    to change the program so it creates more log entries. But If they have
    a better debugging program, why not just send it to me and wait until I
    send back the log.

    If asking the above, then sending it to you wouldn't appear to make
    sense from their perspective.

    Like most of your posts...pertinent information is often left out.
    - Something you said you bought (What did you buy)
    - Software needed for something you bought (What software does it need)
    - How was 'it'(the software) installed in Windows 11
    => was it supported on Win11??? Which era was it released(Win10,
    Win8, Win7, WinVista, WinXP, Win95)?? Was it installed in Win10
    compatibility mode.

    Who knows maybe 'it' needs VS C++ Redistributable 2015-17-19-22 for
    Visual Studio.
    If so, and since Win11 is x64 only, download it here <https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170>
    Look under Architectural Link, for the latest x64 version 14.44.35208.0
    The downloaded file name is vc_redist.x64.exe
    --
    ...w¡ñ§±¤ñ
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Paul@nospam@needed.invalid to alt.comp.os.windows-10,alt.comp.os.windows-11 on Fri Jul 4 18:46:25 2025
    From Newsgroup: alt.comp.os.windows-11

    On Fri, 7/4/2025 10:55 AM, micky wrote:
    I bought something that requires software. It installed and ran fine
    the first time on the no-longer in use win10, but only displays a little
    blue circle for 4 to 60 seconds, usually 4, on my new, main, win11
    laptop.

    I've written to the vendor, explained everything I did to debug and sent
    him copies of their error log.

    1) SO WHY DOES HE want to do a remote session? Is there debugging software that can be superimposed on an unmodified program that will
    give more information than the log does? That's the only reason I can
    think of where a remote session is better than the log****.

    2) Precautions:
    If I'm watching my monitor, can they be downloading things in background without my seeing?

    All of my sensitive information, bank account numbers, userids, and
    passwords are either in one email mailbox with an irrelevant name, or
    those involving money are in two files password protected by
    Libreoffice, and one other email in the outbox. Should I move all
    these to external storage and then disconnect that before I allow the session?

    Can they read a LibreOffice password**-protected file without the
    password?. **Which is only 5 letters long, because it was meant to
    stop the average thief who stole my laptop when I travel?


    I have a few little bur real reasons to think this guy is not legit,
    which I can explain if they are not considered off-topic.

    **** Seems to me the log should be enough and they won't learn anything
    from watching it run on my computer. If the log is not enough they need
    to change the program so it creates more log entries. But If they have
    a better debugging program, why not just send it to me and wait until I
    send back the log.

    Haven't I seen you in the

    "I won't pay a lot for this muffler"

    advert ? :-)

    I remember the one and only time a Muffler Shop
    fitted a reedy piece of crap on my car. That was all the
    advert I needed.

    If an idea seems bad on the surface, and bad after dinner,
    it's quite likely to be a bad idea. Especially after dinner.

    *******

    Spare disk, clean install, test the crappy software.

    Did it work ?

    Run Process Monitor. Set filter to <name of program> after the trace
    (all events are captured, setting the filter reduces visible noise).
    Perhaps during the blue circle interval, you can spot the program
    looking for something and getting "file not found" and so on.

    https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

    It's normal, for programs to scan the registry and come back with
    "registry entry not found". The software has to deal with many
    environments.

    Having the program reading or scanning your Firefox
    files, your Bitcoin wallet, and so on, is NOT normal. And software
    should be turfed immediately if that happens.

    Maybe the product comes from a Black Hat, and the software
    never does more than make a blue circle. I trust your sense
    of OPSEC on this matter, as I know you don't download software
    from dark alleys.

    I can't think of a single good reason for anyone to remote
    into my computer. I can think of several bad reasons.

    Paul
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Alan K.@alan@invalid.com to alt.comp.os.windows-10,alt.comp.os.windows-11 on Fri Jul 4 21:23:16 2025
    From Newsgroup: alt.comp.os.windows-11

    On 7/4/25 10:55 AM, micky wrote:
    I bought something that requires software. It installed and ran fine
    the first time on the no-longer in use win10, but only displays a little
    blue circle for 4 to 60 seconds, usually 4, on my new, main, win11
    laptop.

    I've written to the vendor, explained everything I did to debug and sent
    him copies of their error log.

    1) SO WHY DOES HE want to do a remote session? Is there debugging software that can be superimposed on an unmodified program that will
    give more information than the log does? That's the only reason I can
    think of where a remote session is better than the log****.

    2) Precautions:
    If I'm watching my monitor, can they be downloading things in background without my seeing?

    All of my sensitive information, bank account numbers, userids, and
    passwords are either in one email mailbox with an irrelevant name, or
    those involving money are in two files password protected by
    Libreoffice, and one other email in the outbox. Should I move all
    these to external storage and then disconnect that before I allow the session?

    Can they read a LibreOffice password**-protected file without the
    password?. **Which is only 5 letters long, because it was meant to
    stop the average thief who stole my laptop when I travel?


    I have a few little bur real reasons to think this guy is not legit,
    which I can explain if they are not considered off-topic.

    **** Seems to me the log should be enough and they won't learn anything
    from watching it run on my computer. If the log is not enough they need
    to change the program so it creates more log entries. But If they have
    a better debugging program, why not just send it to me and wait until I
    send back the log.

    I'm a fan of honesty. Tell him you're paranoid about your PC, nothing against him (not
    that he needs to know). Ask what he wants to do and could you do it for him. --
    Linux Mint 22.1, Thunderbird 128.12.0esr, Mozilla Firefox 140.0.2
    Alan K.
    --- Synchronet 3.21a-Linux NewsLink 1.2
  • From Andy Burns@usenet@andyburns.uk to alt.comp.os.windows-10,alt.comp.os.windows-11 on Sat Jul 5 11:41:01 2025
    From Newsgroup: alt.comp.os.windows-11

    micky wrote:

    I bought something that requires software. It installed and ran fine
    the first time on the no-longer in use win10, but only displays a little
    blue circle for 4 to 60 seconds, usually 4, on my new, main, win11
    laptop.
    You haven't mentioned which remote software the vendor would like to
    use. The inbuilt "Quick Assist" is safe enough IMO, so you could
    suggest it ...

    1) you have to give permission for him to view your screen

    2) you would have to give a separate approval for him to have remote
    control of kbd/mouse.

    3) It doesn't allow copying on/off of files.

    4) If you're logged-in as a non-admin account, it won't allow running
    UAC programmes without your approval.
    --- Synchronet 3.21a-Linux NewsLink 1.2