-----Forwarded Message----- > From: Darryl Catchpole <[EMAIL PROTECTED]> > To: James ''Wez'' Weatherall <[EMAIL PROTECTED]> > Subject: Re: Security Problem > Date: 13 Jul 2002 03:02:21 -0700 > > Thanks Wez, > > Problem > ------- > When you enter the name a vnc server into the vnc > server edit box, it stores > the name into the registry in plain text. If you > accidently type in the > password (I did) then your password is then stored in > registry in plain text > too. > > Your password is then available for viewing and it > shouldn't taken an > intellectual giant to work out that the password will > relate to one of the > other servers listed in the registry. > > Work around > ----------- > Servers are stored in > HKEY_CURRENT_USER\Software\ORL\VNCviewer\MRU (Win 9x), > delete the registry key. > > Solution > -------- > Only store server names to the registry after the > client has been able to > connect to the server. _______________________________________________ VNC-List mailing list [EMAIL PROTECTED] http://www.realvnc.com/mailman/listinfo/vnc-list
