> "John E. Peterson" <[EMAIL PROTECTED]> > Wed, 25 Feb 2004 00:15:52 -0500 > > So, Jack. Now that you pointed that one out, does your PUBLICLY posting > Tom's IP info make him now more vulnerable to attack? Sure, it was public > before, but you now took out your yellow highlighter and pointed it out for > everybody.
Those who would take advantage of that information don't need Jack's post first. > And if we can't use VNC to do just exactly what Tom did, I suspect that you > will probably end up with 80% of the people who USE VNC no longer using it > for anything. I suspect that MOST people who download VNC did it for I don't think so. I think, if they care, they will tunnel. If not and they VNC it anyway, they are at least aware of the risk. If they abandon VNC because they get scared because somebody made them aware, then they didn't need it anyway. > extactly the same reason that I did. I needed a simple, easy to use method > of accessing my home PC from work and vice-versa. I don't have the time, or Doesn't your company care about the risks? > resources to set up a full VPN system as many suggested. I was tickled pink > to jsut get THIS much to use! "Many" are only pointing out how simple it is to set up a tunnel with ssh. Little effort for much protection. > You also suggest a direct mail back directly to you, and not the list. Then > why did you post to the LIST? He wrote to send flames directly to him. He wrote a friendly, helpful message to all in the list. > 1) VNC is doing exactly what I want and how I want. Good. > 2) I am not a security "expert", but I'm not an idiot. I do take some > basic precautions, but NOTHING is 100% secure. True. But there are a lot of gradients between 0% and 100%. > 3) This security thing to ME seems to be getting a bit more "interest" that > one might expect -- especially considering there have not been many That was the goal. > objecting posts, just a lot of supporting posts from unusually fanatic > people about this VERY specific problem for some reason. My point? A post Who's getting fanatic? > simply pointing out what is already implied and mentioned in the docs and > faqs that "Don't forget, you aren't really secure" might have been very > appropriate. The posts here have been unusually detailed for some odd Details clarify, aid understanding, not just the how but the why. > reason. Either someone is out to make this whole VNC thing difficult for > somebody, or there are "somebodys" who are trying to prove that they are > smarter than us -- compensation problems? I've been involved with computers for 20 years and have never had any system under my control compromised by virus (remember boot sector virus?), worm or hack attempt. Just want to share and help, not prove anything. I've had a good 14 years with my present employer and am looking forward to a few more. > In the 2 weeks I have been here, I have enjoyed the conversation, the > assitance I have recieved, and even have had fun tearing my hair out trying > to figure out what the heck is up with Tom K's computer why he can't > connect. But this stuff can make lists like this NOT FUN and NOT > PRODUCTIVE. It's about giving people a chance to make sure the experience remains a good one. > I GET YOUR POINT, ALL OF YOU. IT'S NOT SECURE. NOW GO AWAY AND LET US GO > BACK TO SOLVING REAL PROBLEMS THAT REAL PEOPLE HAVE. Nobody is trying to convince you to do anything you don't want. If you don't consider security to be a real issue, that is your priviledge. Take it easy and you might notice that I do occasionally help a real person solve a real problem. Cheers, Carlyle -- Diese E-Mail enthdlt vertrauliche und/oder rechtlich gesch|tzte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrt|mlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
