> What difference is there if I can transfer the file through my vnc
> connection or if I just connect with vnc and access a sever to
> download the file from.  It just saves me a step in sending the file. 
> There is no additional security risk.

UltraVNC is (IMO) a good idea. I pulls a number of ideas into one source and 
includes a few new ones too. I'm hopeful that a linux version will come out 
shortly. The sooner the windows version stops keeping the password in the 
registry the better.

As to security, the file transfer mechanism logs into a NT/2000 as the system 
account. So.... anyone who knows the VNC password (or cracks it) they can 
use the file transfer program to access 99.9% of the NT/2000 install.

I have emailed Sam about this one and he says he's looking at a fix for it. 
Personally, I'd like to see UltraVNC access the user's disk with the same user 
persmissions as the currently logged user by default. (although a better option - 
for me at least - would be to use the NTLM logon details to grant rights to the 
file transfer routines).

With any VNC release as long as the enhancements can be turned on/off and 
remain compatable with older releases, I think continued development can only 
be a good thing for all platforms.

Later,
Richard

---------------------------------
Richard Harris
Environment IT, NCC
Ext 4509
---------------------------------

"Service, price , quality: pick any two."
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to