Re: VNC is hackable (was VPN and VNC)

2002-08-30 Thread Jonathan Morton
Unless you have added encryption to it, the passwords are not encrypted. Please explain the discrepancy between the claim above and FAQ #55: I will freely admit that I have not studied the source code thoroughly. I can think of three possible explanations for the discrepancy. There may be

Re: [despammed] Re: VNC is hackable (was VPN and VNC)

2002-08-30 Thread Wes Groleau
3. Several people on VNC mailing lists don't know as much as they seem to know. I think most of the old timers know enough - VNC is a simple enough system that it's hard to forget. My comment was a sneaky way of admitting that I made the mistake of hearing people who sounded like they

Re: [despammed] VNC is hackable (was VPN and VNC)

2002-08-29 Thread W. Brian Blevins
PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [despammed] VNC is hackable (was VPN and VNC) Reply-To: [EMAIL PROTECTED] On Wed, 28 Aug 2002, Wes Groleau wrote: Mike Miller wrote: difficult for someone to get into my box by a VNC exploit. Am I wrong? Wouldn't they have to sniff packets

Re: VNC is hackable (was VPN and VNC)

2002-08-29 Thread Wes Groleau
Unless you have added encryption to it, the passwords are not encrypted. Please explain the discrepancy between the claim above and FAQ #55: I will freely admit that I have not studied the source code thoroughly. I can think of three possible explanations for the discrepancy. There may be

Re: [despammed] VNC is hackable (was VPN and VNC)

2002-08-28 Thread Wes Groleau
difficult for someone to get into my box by a VNC exploit. Am I wrong? Wouldn't they have to sniff packets and decrypt to get the password? I suppose it can be done, but I don't know that anyone is doing it. Unless you have added encryption to it, the passwords are not encrypted. But what

Re: [despammed] VNC is hackable (was VPN and VNC)

2002-08-28 Thread Mike Miller
On Wed, 28 Aug 2002, Wes Groleau wrote: Mike Miller wrote: difficult for someone to get into my box by a VNC exploit. Am I wrong? Wouldn't they have to sniff packets and decrypt to get the password? I suppose it can be done, but I don't know that anyone is doing it. Unless you have