> -----Message d'origine-----
> De : James Weatherall [mailto:[EMAIL PROTECTED]
> 
> Because certain platforms only provide the first eight characters of
> passwords entered by the user via getpasswd(), the server assumes the same
> limitation, whether or not the limitation actually exists on the server
> platform.
> 
> If it didn't assume that, then you would find that you could log in with a
> "long" password from a viewer on one platform, while it would be
> *impossible* to login from a viewer running on one of the limited platforms.
> 
> Wez @ RealVNC Ltd.

        So, you're saying that Unix clients are using this famous getpasswd() 
function!  That means it's the answer to my second question in another mail that 
nobody has answered: client chop off from the password from the 9th characters before 
sending it out (encrypted or not is another matter).  That is bad, really bad.
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
To remove yourself from the list visit:
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to