How does this work when the Solaris system is running with Trusted 
Extensions enabled ? In particular given that the screensaver is a 
trusted path concept and cut and paste is intercepted on trusted path 
and subject to authorisation.

I was surprised you said there was no authentication or authorisation, 
but then the upstream page on "Security" says this:

"Synergy does not do any authentication or encryption. Any computer can 
connect to the synergy server if it provides a screen name known to the 
server"

Scarey!  Does that really mean what it says ?  If I run synergy on my 
Solaris desktop anything that can make a network connection to it can 
grab the keyboard and mouse ?  That is scarey!   I can't find out from 
the project home page how port numbers are selected and if it is 
possible to force it to bind to localhost only (so that if can be run 
over SSH and not still exposed unencrypted).

--
Darren J Moffat

Reply via email to