> I would like to see a better encryption process for VNC, as I have had a
hacker figure out my password schema

Besides encrypting the data stream between host and client there is still
(IMO) an issue with WinVNC and storing the encrypted password in the
registry. RealVNC 4 stores it's settings in HKLM\Software\Real4 and by
default users have the ability to read that section of the registry.

At first glance it seems possible to remove the user permissions to the
key and this stops users from viewing the encrypted password but does not
break VNC4. What side effects would this have on other functions of VNC?

Regards,
Richard


This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager via NCC Help Desk (0115) 9772010.

This footnote also confirms that this email message has been swept
for the presence of computer viruses.

Nottinghamshire County Council Legal Disclaimer
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to