OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Any issues with WinVNC
From: Illtud Daniel (illtud.danielLLGC.ORG.UK)
Date: Tue Jun 27 2000 - 11:02:46 CDT

C-Naptik Phire wrote:

> On the flip side, I hate when companies lie, and this sounds like hyperbole to me:
> <<There may well be bugs in WinVNC, but we know of people running it on thousands of machines without problems, so please ...>>
> (http://www.cam-orl.co.uk/vnc/faq.html#q53)
> when compared with
> <<please remember that VNC has hundreds of thousands of users, and we cannot, in general, respond to individual queries. >>
> (http://www.cam-orl.co.uk/vnc/winvnc.html)
> Which is it, mmmm? ;-}

VNC is an open-source and the development is rapid (rather too
rapid for the AT&T maintainers!) and solid. It's cross-platform
(*n*x, Mac, windoze, DOS, Palm....) and very impressive. If you're
running it on NT, then AFAIK, there's no 'free' SSH implementation
(there's a client but no server that I know of), but it works a
treat as a stateless X-server replacement on my NT box to allow
me to access my headless linux servers.

I think that the latest releases are immune to the modified
dictionary attack mentioned in this thread, but connections
should at the very least be restricted by IP address (the windows
server version has this built-in) and preferably piped through
your favourite (strong!) stream encryption.

> Overall, thanks for pointing it out. I'll keep it in mind

Note the 'proper' url:
http://www.uk.research.att.com/vnc/ 

--
Illtud Daniel                                 illtud.danielllgc.org.uk
Uwch Ddadansoddwr Systemau                       Senior Systems Analyst
Llyfrgell Genedlaethol Cymru                  National Library of Wales
Yn siarad drosof fy hun, nid LlGC   -  Speaking personally, not for NLW