Lets talk about VNC

[idea]

I recently found this little gem called VNC. I'm amazed! I was at work today, VNCing to my linux box at home and it looked perfect. So I set up another VNC server on my home WinXP box because... well, why the hell not? Tomorrow I plan to install it at work too.

However.. I'm starting to be a little concerned about security. There is no encrypting going on here. Should I be worried? I have 3 boxes setup with VNC that are completely out in the open, protected by a measely password.

I've played with 2 client/servers: RealVNC (setup for linux) and TightVNC (setup for winxp) just for a little variety. I thought UltraVNC was a bit overkill being that it has file transfers and all that stuff. I use FTP for that.

If it at all matters, I have a Linksys WRT54G with VPN. I'm really not sure how to use it though.

So, what clients do you guys use, and what security precautions are you guys taking?

 

[Crusty]

I always tunnel VNC through SSH, gives me an extra layer of security .

 

[JackMDS]

http://msrc4plugin.home.comcast.net/

:sun:

 

[EatSpam]

I use VNC over Citrix for that extra geeky leetness.

 

[nweaver]

Originally posted by: MCrusty
I always tunnel VNC through SSH, gives me an extra layer of security .

:thumbsup:

 

[Trevah]

Originally posted by: idea
I recently found this little gem called VNC. I'm amazed! I was at work today, VNCing to my linux box at home and it looked perfect. So I set up another VNC server on my home WinXP box because... well, why the hell not? Tomorrow I plan to install it at work too.

However.. I'm starting to be a little concerned about security. There is no encrypting going on here. Should I be worried? I have 3 boxes setup with VNC that are completely out in the open, protected by a measely password.

I've played with 2 client/servers: RealVNC (setup for linux) and TightVNC (setup for winxp) just for a little variety. I thought UltraVNC was a bit overkill being that it has file transfers and all that stuff. I use FTP for that.

If it at all matters, I have a Linksys WRT54G with VPN. I'm really not sure how to use it though.

So, what clients do you guys use, and what security precautions are you guys taking?[/]


You should think again about using ultravnc as it has built in encryption. The only drawback is that your client has to have the key file as well (in order to login with encryption).

 

[manno]

I have no idea how helpful this is, but I personaly tunnle through openVPN, to VNC into my home computer, it's a snap to install on XP.

 

[Leros]

How about this. My school and the technology center block EVERY port except port 80. Anyway I can VNC to my home computers with these restrictions?

 

[manno]

I think you can if you set your router, up correctly and tell VNC to use port 80, on both the client and server

 

[steelio]

Originally posted by: manno
I think you can if you set your router, up correctly and tell VNC to use port 80, on both the client and server

but by doing so H4ckers just have to hit port 80 and pop they are in.

 

[TiziteLayinLow]

install a VPN or SSH server listening on port 80... if your school allows GRE47 outbound (basically PPTP pass-through) then you can get in and have access to not only your VNC but the unfiltered internet using your home pc as a proxy.

good luck...

p.s. i use win server 03 with remote access role.. theres no direct setting but there might be in the registry.. on default pptp uses 1723 tcp to connect.. so id look into that or the openVPN.. i havent messed with that