Security Basics mailing list archives
Re: Remote access solution
From: "Chris Berry" <compjma () hotmail com>
Date: Wed, 26 Feb 2003 10:15:04 -0800
From: "Mike Jensen" <jenseses () hotmail com>One thing to keep in mind when using VNC is that even though the inital authentication may be secure, anything you type while controlling the computer is sent in plain text. So, if you were to connect to a windows machine, for example, then login to or unlock the screen on that machine , that password you type is sent across the network in the clear. Or, you type in your password to check your e-mail on that computer; again, your password is sent in the clear.I've always recommended tunneling the whole VNC session through some type of encryption method. (I prefer VPNs)
Actually, I don't think even the initial authentication is secure, you should definitely use some sort of encryption (ssh or vpn or both) Personally I'd say ssh is fine when you're connecting from one interior computer to another, but if you're going to connect from home or something I'd say tacking a vpn on top would be a good idea.
Chris Berry compjma () hotmail com Systems Administrator JM Associates"Linux and I have a love/hate relationship. I hate its complexity until I figure out how something works, then I love its power."
_________________________________________________________________Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail
Current thread:
- RE: Remote access solution, (continued)
- RE: Remote access solution sharon_joyner (Feb 20)
- Re: Remote access solution Nuzman (Feb 22)
- RE: Remote access solution Michael Parker (Feb 22)
- RE: Remote access solution Chris Berry (Feb 22)
- Re: Remote access solution Chris Berry (Feb 25)
- RE: Remote access solution Michael Whang (Feb 26)
- Re: Remote access solution Chris Berry (Feb 25)
- Re: Remote access solution Mike Dresser (Feb 26)
- RE: Remote access solution James Butcher (Feb 26)
- Re: Remote access solution Mike Jensen (Feb 26)
- Re: Remote access solution Chris Berry (Feb 26)
- Re: Remote access solution Chris Berry (Feb 26)
- RE: Remote access solution Fields, James (Feb 27)
- RE: Remote access solution sharon_joyner (Feb 20)