Comments for Is it safe to allow a technician to remotely access my machine to fix it?

Comment from Alexander Nicol on 2011-02-25

2011-02-25T16:12:06Z

I thnk it is ok for say Toshiba.HP,Microsoft my
ISP to be able to share my computer.I have done
so in order to fix a problem.Now if i had something on my hard that may be illegal, i would not share.

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from chris on 2011-01-01

2011-01-01T20:24:54Z

Hi, I recently allowed a linksys phone technician have access to my 2008 IMAC (runs MAC OS X). I have not noticed anything wrong with or strange with the computer since then, but I have been concerned that my computer may still be in some kind of danger. At this point, would you recommend running some kind of anti-virus or spyware program to make sure that nothing malicious has been installed? Or am I in the clear if everything has been okay since the remote session?

thank you for the post!

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Arthur Glazer on 2010-12-22

2010-12-22T22:45:03Z

What about the guy that comes to your house? He can do the same damage. You folks are paranoid. You are supposed to be hiring someone who does the job; who you trust no matter how the repair is done - remote or on- scene.
I use a remote utility that asks for a code at each end. When the connection is cut, (and can be by the client at any time) new codes must be generated. There is no way for me to go back in later. It won't work. And believe me, I've got better things to do than prowl around someone's system. Again, the same damage could be done with their PC in my lab. I don't look where I don't belong - period.
As far as changing settings- the same could be done back at the lab. You either trust them or you don't.
Those who hire me, trust me. I have a reputation to uphold and would like to stay in business.
You call someone because you want an issue resolved - watch them. Learn. But trust them. Or don't call!

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Joan on 2010-06-26

2010-06-27T05:31:57Z

In the comments area - they mention that they are sure to BLOCK any access once the remote access is over... HOW exactly does one go about that?

Depends on what technology they're using for remote access.

27-Jun-2010

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from john on 2010-06-22

2010-06-22T16:37:06Z

Frostbyte "would not take a tech's word for anything" and says "Even the reputability of a company is no guarantee."
But he wants people to trust him? He says he can watch while the remote guys do the job but some of theier work can be hidden.
I know a guy who calls to people to fix computers and he told me how he can get behind any password and laughed at how people password protect files.
When a laptop hard drive died on me i went to shop and watched while the guy put in a new one and took away the old one.
someone said remove hard drive before giving it to shop. how will they be able to find out what is wrong with it then since the OS is on the hard drive?

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Harvey S. Frey on 2010-06-03

2010-06-03T20:50:58Z

I've had cases where a tech has changed settings which screwed up my internet access, and then didn't know how to fix them.

I now routinely insist that they tell ME what to do, and if they want me to change anything, I have an opportunity to record prior settings.

They don't seem offended.

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Frostbyte on 2010-06-03

2010-06-03T18:52:10Z

I have extensive experience from both ends of this issue. I'm a consultant that provides full computer services to the SMB (Small/Medium Business) market and remote access is essential to what I do for a living. It allows me to solve client issues rapidly, efficiently, and cheaply. It's an income multiplier for me as I can be logged onto several different clients and working on all of them simultaneously. Being as I provide full services to these clients and have full access to everything on servers and workstations trust isn't really an issue. If they didn't trust me they wouldn't hire me. My clients love the service, it's so nice to call and say "blah blah isn't working, fix it please". Even when a physical button needs to be pushed I can call them and tell any non-technical employee to do what needs to be done.

I also do this for relatives, it really saves me a lot of time and when you have a family like mine you're expected to contribute like every one else.

Having said that, the other end of the stick is that I often need to let vendors have access to client systems. I've been working on computer systems for almost 30 years but no one knows everything and it's often best to let the vendor deal with their own software problems. I NEVER let them have full access and I ALWAYS stay logged on and watch what they do while they do it. I've seen vendor technicians do things like try to create a Domain Administrator for themselves, try to leave the remote access software installed and running by default, uninstall programs and features that have nothing to do with their issue or software, etc. Very often during this process it's my observation/suggestion that actually solves the issue. At the end of the day I'm responsible for these computer systems and no one else is going to be held accountable for them so due diligence is required.

My advice to the general user is not to allow this type of connection unless you know enough about how your computer works to be SURE that you are in control. I wouldn't take a technician's word for anything, you don't know them at all. I especially wouldn't take an offshore technicians word for anything. If they want you to download and install something, make sure you know how to uninstall it when that support session is finished.

Even the reputability of a company is no guarantee. Especially with offshore support (as in from India), that tech may be under influences you have no inkling of. I especially don't trust the various Anti-Virus vendor's techs. Besides any other agenda they may have their first move is usually to uninstall any and all software from any competitor. I had one insist that a disk imaging program from another vendor had to be uninstalled to repair their AV software, which was total bullhockey. If they're hacking your computer and selling access to the _____ (fill in your own bad-guy, Identity Thieves, Spammers, etc.) the worst they'll suffer in their country is to get fired, and probably not even that.

Under no circumstances should you ever allow them to work on your computer when you're not directly in voice contact on the telephone and you are directly observing what they're doing on the screen. Ask a LOT of questions and make sure a few of them have to do with how to kill that remote software and uninstall it when they log off.

Remember, these guys usually aren't actual employees of the vendor, ISP, etc. They're in a boiler room in a foreign country and getting paid by "calls resolved". That means the faster they can fob you off so they can mark your call resolved and get on to the next call the more money they make. Their incentive isn't to solve your problem, it's to mark your call as resolved as fast as possible. So DON'T let them hurry you, haste makes waste and that goes double in computers. You called for support, get supported and don't be afraid to slow them down to something you're comfortable with.

This is a main reason why they want remote access also, so they can fly through the call as fast as possible. If they try that, disconnect the remote session immediately and tell the tech on the phone that if he can't take the time to explain each step to you while he's doing it that you'll have to proceed without remote access. That will put him on notice that you're not going to be run over rough-shod.

Most of them aren't really technicians either, they're looking at a flow-chart and a script on a computer screen in front of them and if your problem isn't covered by their flow-chart they have no clue how to help you. BUT they don't want to bump you up to a higher tier of support because then they lose the revenue from your call. That's also why they always ask you if your problem is (whatever) in different words than you used when the call initiated, their English is mediocre and they are reading from the beginning of the flow chart to be sure they're on the right page.

Another tip for offshore support, if you have trouble understanding their English just tell them you can't understand their accent. Stick to that story and usually they'll bump you up to a supervisor with better language skills. Don't be afraid to ask to talk to a supervisor if you're not comfortable for any other reason also.

All of this information is to be kept in mind when you're allowing some total stranger access to your system. There are ways to upload things to your computer and run them that you can't see on the screen so think long and hard about trusting a technician with remote access. Just because it's on the computer and it's a major vendor support you're talking to doesn't really negate the fact that you are trusting everything to a total stranger.

On top of all of that, some remote access programs are flawed or exploitable so even if the company is reputable and the tech is honest that doesn't stop a bad-guy from scanning your ports looking for a vulnerability opened by a remote access program or it's aftermath.

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Lester on 2010-06-03

2010-06-03T17:00:30Z

A comment on the other side. I do computer consulting out of my home, and remote access is one of my handiest tools. Most of the people I'm helping don't really know that much about computers and trying to guide them through something can be a real pain. Will I misuse this? Hardly? Could I? Hardly, since I don't keep log on information. The question is more: Do they want my help or don't they? If not, don't bother me, if they do, then let me do what I need to do. I realize that most of these people actually know me, which might make a difference...

I'm sure it does. But would you let someone you didn't know connect that way to your machine? That's exactly what many companies are asking people to accept.

05-Jun-2010

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Pat on 2010-04-22

2010-04-23T02:08:21Z

I allowed a McAfee tech. access to my computer, he did a great job fixing the problem. After I blocked future access. Not so funny, a week later someone or something trying gaining access to my computer, asking for permission, I blocked it!!!!
Is this something I should be very concerned about?

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Mitchell on 2010-02-05

2010-02-05T17:16:51Z

A technician, yes. Anyone else that is not family, no! These remote access programs can be a lifesaver, but in the wrong hands they can leave you 100% vulnerable to attack and, worse, while you think you are receiving support, you can be getting attacked..as you watch!

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Michael Horowitz on 2009-06-30

2009-06-30T22:08:25Z

The advice to make a disk image backup before letting a total stranger "drive" your computer is an excellent one. No matter what the software problem is, an image backup from a bootable CD should be possible. Great defensive computing, Leo.

Let me also suggest using an external hard drive for storing all your sensitive files. This way, by simply removing the hard drive you know there is nothing on the computer that you wouldn't want a stranger to see (be they a remote stranger or a local computer repair outfit).

I have no connection to Lenovo at all, but I very much like the concept behind their ThinkPad USB Secure Hard Drive. Its an external 2.5 inch hard drive that does hardware encryption with NO dependency on any software on your computer at all. You enter a password into the device by pressing buttons on it. Your computer is oblivious to the hardware encryption, so it should work with any OS.

Of course, you pay more for this security in the ballpark of $90 extra when compared to a standard external hard drive. But, if you have sensitive files, its a great way to go.

I don't use it, preferring the free TrueCrypt, but I'm a techie. For many computer users dealing with TrueCrypt is too much. And, there is great safety in not having any sensitive files on the computer at all, encrypted or not.

See my blog for more about the hardware
http://blogs.computerworld.com/about_the_lenovo_thinkpad_usb_secure_hard_drive

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Bonita on 2009-06-27

2009-06-27T19:17:38Z

Completely agree with article, Leo.

My first (and probably last) experience with Remote Assistance (with my ISP) was less than perfect. Was trying to install the ISP�s security suite and the download button on the website did not work. The technician wanted to do Remote Assistance.

After downloading a considerable number of files to make this possible, the tech flew through screen after screen for about 10 minutes and had to give up. (Much later I found out that all that had been needed was to uninstall the prior version of that security suite first).

After the Remote Assistance, problems immediately began with my Internet connection, and a System Restore did not help. I ended up having to reinstall Windows (with Dell�s guidance).

The computer damage may have been an unusual case. But, at best, the technicians simply work too fast for a novice to follow what they are doing, and the session left me just as ignorant as before. Personally, for me, it is far preferable for the technician to give steps and let me do the work so that I can learn how to hopefully solve the problem without tech support if it happens again.

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Hughon on 2009-06-27

2009-06-27T07:22:26Z

I understand the concern for security and safety with having someone you know nothing about, gaining access to your PC remotely, granted or not. But you must ask yourself this question. Is it any safer to bring your PC to a local support shop for repair, when you know nothing about them either?

I looked at it this way. When you give access to a technician remotely, of course there is the risk they may access more than you hope. But at least you can terminate the connection at any given time you don't feel comfortable with what they are accessing. Yes, you have that much control over the entire process, thanks to todays standard of connectivity. You have to actually say yes to it before they actually connect to your PC, and can stop the process anytime.

However, what about the process you can only control to a point when you bring your PC to a local repair shop. You bring your PC in, you gave your information to someone(could be a technician), and then was told to come back the next day for pickup. But what you may not know is the level of invasion into your privacy that took place in this process, and the big thing is, you can't stop it and you don't really know what they did.

At least with remote access, you can see everything the technician is doing.

Cheers

You're raising some good points, however the issue to me is one of accountability. While there are risks in taking your PC to a shop (I've talked about them before), you know who they are, and if there's an issue you go back to the repair shop an talk to the same person. There's an individual involved, that you can see and meet and talk to face-to-face. That changes the relationship.

With remote assistance from many large vendors you have no idea who it is that you're letting access your machine. They could be next door, they could be on the other side of the planet. If you call back with an issue, you'll likely get a completely different person who won't know what the first one did. IMO it's just too anonymous, and too risky.

I totally understand the appeal to the technicians themselves - they, of course, know who they are and know that they are trustworthy. Unfortunately customers don't have that knowledge, they can only make assumptions.

- Leo
27-Jun-2009

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Jeffrey on 2009-06-24

2009-06-25T06:01:56Z

windows remote access can be disabled, but I use a remote access not involving the windows service as part of my job....
the other point to make is, as I have read on other posts, if it is not physically secure it is not secure, and the other options for the service my company provides is for the customer to take the computer to the storefront or a tech to go the home. That means there is no difference between what I do remotely, and what any other tech for the company does.

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Thom on 2009-06-24

2009-06-24T23:21:05Z

I've, worked in several phases of this technology in the last 25 years. I'm semi-retired now, and I use remote control almost exclusively for support. It allows me to keep the labor charge down by discounting my cost & time to travel. And, I don't have to carry disks (tools) etc, to a customer's site. Everything is on my local system that I'll need.

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from misja on 2009-06-24

2009-06-24T16:14:22Z

as a technician i am very happy with remote access. it means i can solve my customers problems from a distance and that means faster. as otherwise the client will have to bring the pc or laptop to me (or i have to go to them) there is no extra risk for them. the risk is there anyway when i have the machine on my desk with full access. obviously my clients trust me. they have to trust me otherwise i can not solve the problem. in my opinion only when you are skilled enough to solve each problem yourself you have the option not to give access to somebody else.

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Glenn P. on 2009-06-24

2009-06-24T13:39:04Z

I disabled Remote Assistance almost as soon as we got our computer. That was so long ago (and I do believe I used more than one method) that I no longer remember how to re-enable it, assuming that such should ever be necessary.

And I shall make SURE it ain't necessary, because NOTHING can EVER be THAT necessary!!!

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Carl R. Goodwin on 2009-06-23

2009-06-23T15:31:50Z

One of the first things that I do after I reformat my machine is to turn OFF "Remote Assistance".

]]>

A comment on: Is it safe to allow a technician to remotely access my machine to fix it?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.