So finally, with what all of you have written, you're saying/confirming that 
VNC is still secure?  If so, why should we care?

        FYI, in Win2000, with a single NIC, it is possible to have IP addresses.   I 
haven't studied what "horizon" this would give.  Maybe more connection requests could 
be issued from one single computer?

> -----Message d'origine-----
> De : Rasjid Wilcox [mailto:[EMAIL PROTECTED]
> Envoyi : jeudi 26 fivrier 2004 08:17
> @ : [EMAIL PROTECTED]
> Objet : Re: You brute!!! (brute force attacks)
> 
> On Thursday 26 February 2004 15:13, John E. Peterson wrote:
> > I thought of that this morning too.  But you forgot something important.
> > NUMBERS are allowed too.
> >
> > So it is a password that is up to 8 characters long using a set of 36, not
> > 26!   (36^8)
> 
> No, I didn't forget.  I was just setting a baseline for a genuinely random 8
> character password.  If you use all readily accessible characters on the
> standard qwerty keyboard, you are looking at (2*46)^8 combinations.
> [a-z,0-9,-=[]\;',./ plus all the same shifted].  This comes to
> 5,132,188,731,375,616 or a bit over 5 thousand trillion combinations.
> 
> > What'cha wanna bet that 95% of the passwords are made up of maybe a couple
> > thousand different words though.
> 
> No bets from me on that one.  Even if one assumes that there are 20,000 words
> or word-like combinations commonly used as passwords, these can be
> brute-forced in a few days.
> 
> This is why the 'take the first letter from a phrase' (ie, password would be
> 'ttflfap') approach to passwords is generally seen as a more secure approach
> for memorable password creation, although I believe that the 'randomness'
> generated from gramatically correct phrases is still relatively low.
> 
> Cheers,
> 
> Rasjid.
> 
> --
> Rasjid Wilcox
> Canberra, Australia (UTC +11 hrs)
> http://www.openminddev.net
> _______________________________________________
> VNC-List mailing list
> [EMAIL PROTECTED]
> To remove yourself from the list visit:
> http://www.realvnc.com/mailman/listinfo/vnc-list
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to