Re: removing IP address history
Tyran Ormond wrote: On 10:55 AM 10/23/2006 +0100, it would appear that James Weatherall wrote: Hi teh.asbo, Thanks for posting this handy tip. :) Note that if the administrator is smart and doesn't want you messing with the registry (as any semi-intelligent network admin would), regedit has likely been disable, including the abilty to merge .reg files. With regedt disabled in this way, you cannot merge .reg files [snipped] To fix your problem, fire up notepad, and paste in the following three lines: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\Software\RealVNC\VNCViewer4\MRU] and save it as anything.reg. Double-click it, answer yes to the prompt, and then the MRU list will be deleted. IMO, HKCU is supposed to store user's personal setting. Locking this part of the registry would make a lot of applications function improperly. I don't think any sain network admin would disable access to it. On the other hand, and IMO, if HKCU is locked, VNC Viewer can't write connection history to it. In the same reasoning, .reg can't be merged but it's no necessary since there's no history to delete. Or to the contrary of reasoning, since VNC Viewer keeps a connection history, that means HKCU is writable by user, so it's very likely that .reg could be merged since it write to HKCU as well. I'd like to see a case in which VNC viewer can write to registry but no .reg can be merged (no matter which part of registry it's about). I'd like to see how the admin could achieve this level of twisting :) ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: removing IP address history
On 02:45 PM 10/25/2006 +0200, it would appear that Seak wrote: I'd like to see a case in which VNC viewer can write to registry but no .reg can be merged (no matter which part of registry it's about). I'd like to see how the admin could achieve this level of twisting :) Proof of concept sent off list. Tyran Ormond Programmer/LAN Administrator Central Valley Water Reclamation Facility [EMAIL PROTECTED] ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: removing IP address history
Could you send it to the list.. -siva -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tyran Ormond Sent: Wednesday, October 25, 2006 11:11 AM To: vnc-list@realvnc.com Subject: Re: removing IP address history On 02:45 PM 10/25/2006 +0200, it would appear that Seak wrote: I'd like to see a case in which VNC viewer can write to registry but no .reg can be merged (no matter which part of registry it's about). I'd like to see how the admin could achieve this level of twisting :) Proof of concept sent off list. Tyran Ormond Programmer/LAN Administrator Central Valley Water Reclamation Facility [EMAIL PROTECTED] ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list Confidentiality Notice This e-mail (including any attachments) is intended only for the recipients named above. It may contain confidential or privileged information and should not be read, copied or otherwise used by any other person. If you are not a named recipient, please notify the sender of that fact and delete the e-mail from your system. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: removing IP address history
On Sunday, October 22, 2006 9:26 AM [GMT+1=CET], Max Moroz [EMAIL PROTECTED] wrote: I'm used RealVNC on a public computer, and found out an absolutely terrible thing. RealVNC by default stores all the IP addresses you type in there. Just out of curiosity ... Are you running the server or the viewer on this public computer? I can't imagine anyone controlling a public computer would let you run a server on it; please correct me if I'm wrong here. Assuming you are running the viewer, then presumably the IP addresses that are being stored are those of the remote servers you are accessing. Is this correct? If not, I'd be interested to know more precisely what is going on here. Harold Fuchs London, England ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: removing IP address history
Hi teh.asbo, Thanks for posting this handy tip. :) Cheers, Wez @ RealVNC Ltd. To fix your problem, fire up notepad, and paste in the following three lines: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\Software\RealVNC\VNCViewer4\MRU] and save it as anything.reg. Double-click it, answer yes to the prompt, and then the MRU list will be deleted. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: removing IP address history
Apologies to Wez and other devs for being impolite... It was in the spur of a moment... Thanks teh_asbo, this suggestion works (the public machine didn't let non-admin users run regedit, but still lets them modify registry with this approach). In response to Harold, yes it's a viewer on a public machine. and remote server ip address. thx for all replies cheers - Original Message Personally, I figure out how all of my applications work before I use them in any sort of insecure environment. It seemed to me that you just posted a tirade on how lousy the software was for using a very common method of settings storage when really what was to blame was your own ignorance. Don't get me wrong, I totally understand being caught unawares by code that isn't my own, I just think you could have written your request to the developers in a much more polite manner. To fix your problem, fire up notepad, and paste in the following three lines: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\Software\RealVNC\VNCViewer4\MRU] and save it as anything.reg. Double-click it, answer yes to the prompt, and then the MRU list will be deleted. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: removing IP address history
Presumably you need to be an Administrator to do this ??? Harold Fuchs London, England On Monday, October 23, 2006 10:55 AM [GMT+1=CET], James Weatherall [EMAIL PROTECTED] wrote: Hi teh.asbo, Thanks for posting this handy tip. :) Cheers, Wez @ RealVNC Ltd. To fix your problem, fire up notepad, and paste in the following three lines: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\Software\RealVNC\VNCViewer4\MRU] and save it as anything.reg. Double-click it, answer yes to the prompt, and then the MRU list will be deleted. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: removing IP address history
No. Why would you need that? Wez @ RealVNC Ltd. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harold Fuchs Sent: 23 October 2006 09:15 To: Max Moroz; vnc-list@realvnc.com Subject: Re: removing IP address history On Sunday, October 22, 2006 9:26 AM [GMT+1=CET], Max Moroz [EMAIL PROTECTED] wrote: I'm used RealVNC on a public computer, and found out an absolutely terrible thing. RealVNC by default stores all the IP addresses you type in there. Just out of curiosity ... Are you running the server or the viewer on this public computer? I can't imagine anyone controlling a public computer would let you run a server on it; please correct me if I'm wrong here. Assuming you are running the viewer, then presumably the IP addresses that are being stored are those of the remote servers you are accessing. Is this correct? If not, I'd be interested to know more precisely what is going on here. Harold Fuchs London, England ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: removing IP address history
On 10:55 AM 10/23/2006 +0100, it would appear that James Weatherall wrote: Hi teh.asbo, Thanks for posting this handy tip. :) Note that if the administrator is smart and doesn't want you messing with the registry (as any semi-intelligent network admin would), regedit has likely been disable, including the abilty to merge .reg files. With regedt disabled in this way, you cannot merge .reg files even as an administrator (there are other methods where merging is still possible but what's the point?). While there are ways to re-enable regedit, doing so when the admin has purposefully locked them down is, at the very least, an intentional security breach. The possible ramificationsloss of computer use, loss of employment, criminal chargesthat could stem from intentionally breaching a computer's security measures should not be taken lightly. With all this in mind, I do have a small number of personal clients that have had their registries fouled by malicious code which included disabling regedit and .reg files. For situations such as this, I use the script found here (http://windowsfair.blogspot.com/2006/03/how-to-enable-regedit.html) to re-enable their regedit (assuming I don't just wipe the machine and rebuild it, that is). One final note, if the admin has *really* locked the computer down, scripting may well be disabled and then even the above trick won't work for you. To fix your problem, fire up notepad, and paste in the following three lines: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\Software\RealVNC\VNCViewer4\MRU] and save it as anything.reg. Double-click it, answer yes to the prompt, and then the MRU list will be deleted. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list Tyran Ormond Programmer/LAN Administrator Central Valley Water Reclamation Facility [EMAIL PROTECTED] ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: removing IP address history
Tyran, Note that disabling regedit.exe is _not_ a security-measure. It's simply a way of reducing the likelihood of the user messing up their user settings causing themselves problems. Regards, Wez @ RealVNC Ltd. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tyran Ormond Sent: 23 October 2006 15:08 To: vnc-list@realvnc.com Subject: RE: removing IP address history On 10:55 AM 10/23/2006 +0100, it would appear that James Weatherall wrote: Hi teh.asbo, Thanks for posting this handy tip. :) Note that if the administrator is smart and doesn't want you messing with the registry (as any semi-intelligent network admin would), regedit has likely been disable, including the abilty to merge .reg files. With regedt disabled in this way, you cannot merge .reg files even as an administrator (there are other methods where merging is still possible but what's the point?). While there are ways to re-enable regedit, doing so when the admin has purposefully locked them down is, at the very least, an intentional security breach. The possible ramificationsloss of computer use, loss of employment, criminal chargesthat could stem from intentionally breaching a computer's security measures should not be taken lightly. With all this in mind, I do have a small number of personal clients that have had their registries fouled by malicious code which included disabling regedit and .reg files. For situations such as this, I use the script found here (http://windowsfair.blogspot.com/2006/03/how-to-enable-regedit.html) to re-enable their regedit (assuming I don't just wipe the machine and rebuild it, that is). One final note, if the admin has *really* locked the computer down, scripting may well be disabled and then even the above trick won't work for you. To fix your problem, fire up notepad, and paste in the following three lines: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\Software\RealVNC\VNCViewer4\MRU] and save it as anything.reg. Double-click it, answer yes to the prompt, and then the MRU list will be deleted. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list Tyran Ormond Programmer/LAN Administrator Central Valley Water Reclamation Facility [EMAIL PROTECTED] ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
RE: removing IP address history
On 03:58 PM 10/23/2006 +0100, it would appear that James Weatherall wrote: Tyran, Note that disabling regedit.exe is _not_ a security-measure. It's simply a way of reducing the likelihood of the user messing up their user settings causing themselves problems. While you may not consider it so, does not mean others do not. Unauthorized fiddling with regedit in my environment is a firing offense. Tyran Ormond Programmer/LAN Administrator Central Valley Water Reclamation Facility [EMAIL PROTECTED] ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: removing IP address history
Max Moroz wrote: P.S. If you think I'm exaggerating the problem.. think about it.. You advertise your IP address on a public computer, AND ALSO the fact that you run VNC server there. If you have static IP (say, cable internet), you will quite possibly have willing and able hackers going after your computer trying to guess your password. Just out of sheer boredom. Yes, I know, the password should be hard to guess. But do you really feel like making such a target of yourself?? A better question might be if your personal security is so important to you, why you put sensitive information into a public machine in the first place? ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: removing IP address history
Eh? I didnt mean to put sensitive info on a public computer. I expected RealVNC to just run, and not store anything on the machine. Or in the worst case, leave a file with settings that I can easily erase. If you use web email on a public computer, and found that it left your last letter saved on the desktop, and you can't even erase it, would you feel it's your own fault? Sorry if I misunderstood what you're talking about, but I really can't make sense of your comment. D'~x wrote: A better question might be if your personal security is so important to you, why you put sensitive information into a public machine in the first place? ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: removing IP address history
Max Moroz wrote: Eh? I didnt mean to put sensitive info on a public computer. I expected RealVNC to just run, and not store anything on the machine. Or in the worst case, leave a file with settings that I can easily erase. If you use web email on a public computer, and found that it left your last letter saved on the desktop, and you can't even erase it, would you feel it's your own fault? Sorry if I misunderstood what you're talking about, but I really can't make sense of your comment. D'~x wrote: A better question might be if your personal security is so important to you, why you put sensitive information into a public machine in the first place? ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list HKEY_CURRENT_USER\Software\ORL\VNCviewer\MRU is where the ips are stored on a windows box. If you can get to it someplace else im not surebut im pretty sure you'll need admin rights to the box to be able to get into the registry. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
Re: removing IP address history
Max Moroz wrote: Eh? I didnt mean to put sensitive info on a public computer. I expected RealVNC to just run, and not store anything on the machine. Or in the worst case, leave a file with settings that I can easily erase. If you use web email on a public computer, and found that it left your last letter saved on the desktop, and you can't even erase it, would you feel it's your own fault? Sorry if I misunderstood what you're talking about, but I really can't make sense of your comment. Personally, I figure out how all of my applications work before I use them in any sort of insecure environment. It seemed to me that you just posted a tirade on how lousy the software was for using a very common method of settings storage when really what was to blame was your own ignorance. Don't get me wrong, I totally understand being caught unawares by code that isn't my own, I just think you could have written your request to the developers in a much more polite manner. To fix your problem, fire up notepad, and paste in the following three lines: Windows Registry Editor Version 5.00 [-HKEY_CURRENT_USER\Software\RealVNC\VNCViewer4\MRU] and save it as anything.reg. Double-click it, answer yes to the prompt, and then the MRU list will be deleted. ___ VNC-List mailing list VNC-List@realvnc.com To remove yourself from the list visit: http://www.realvnc.com/mailman/listinfo/vnc-list
