Untitled

Logmein, What is log me in? 

LogMeIn is a centrally-managed zero-configuration virtual private network (VPN) freeware application capable of establishing direct links between computers that are behind NAT firewalls without requiring reconfiguration (in most cases); in other words, it establishes a connection over the Internet, to create conditions very similar to that as if the computers were physically connected or even as if the user is sat at that computer.

How It Works.

LogMeIn is a centrally-managed VPN system, providing a secure connection to a computer through the LogMeIn servers, whether that be your computer at home or in the office or a friends computer who requires assistance. When installing the small client application, the installation will also add a “virtual network interface” to your computer setup. This will be used only for LogMeIn to communicate with your remote location securely using a high level of encryption.

Each client, computers that have the application installed, establishes and maintains a controlled connection to the server cluster. When the connection is established, the client goes through a login sequence, followed by the discovery process and state synchronization, this means the computer that you wish to access creates a link to the LogMeIn server to let it know that it is power on and ready to be used. The login step authenticates the client to the server and vice versa. The discovery is used to determine the setup of client's Internet connection, specifically to detect the presence of NAT and firewall devices on its route to the Internet. The synchronization step brings a client's view of its private networks in sync with other members of these networks to ensure there are no “crossed wires”.

Is It Secure?

LogMeIn uses strong, industry-standard algorithms to secure and authenticate the data and its security architecture is open. The implementation however is closed source and as such it is not available for the review to the general public.

For the product to work, a "mediation server", operated by the vendor, is required. This server stores the nickname, maintenance password, statically allocated 5.0.0.0/8 IP address and the associated authentication token of the user. For every established link or tunnel, it could log the real IP address of the user, time of establishment and duration as well as the other interconnected users.