> HI, This may sound ominous but it's not, i'm doing some security
> investigations into VNC and was wondering about the VNCDEC.c program
> that is availiable. Am I right in assuming that once you compile the
> source code that it will only run on Linux and will not decode Windows
> machine passwords? If someone could let me know, i'd be really grateful.
>
> Many Thanks
> DM

No that is not correct, because VNC uses the same encoding on Windows as
it does Linux.

Assuming someone unauthorized can read your registry (or read files in
your ~/.vnc directory) I would think VNC would be low on your list of
worries.

Another way of making this not as big a deal is to use SSH tunneling and
only accept connections through the tunnel.  That way they would need to
know your SSH password (or better yet, have your private key and
passphrase) AND your VNC password for it to be an issue.

-- 
William Hooper
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to