How secure is VNC?

On Sun, 15 Feb 2004 14:44:43 -0500, somebody wrote:

> My point is, the VNC server reads the password from the
> /home/fred/.vnc/passwd file. What's to stop someone else
> from connecting using vncviewer, since they would not
> be prompted for a password?

Why again would they not be prompted for a password?

- Kay

--
http://kayfox.org/
contact info: http://kayfox.org/contact.html
Linux xheotris 2.4.20-4GB-athlon
4:29pm up 5 days 22:20, 6 users, load average: 0.61, 0.57, 0.45

On Sun, 15 Feb 2004 14:44:29 -0500, somebody wrote:

> My point is, the VNC server reads the password from the
> /home/fred/.vnc/passwd file. What's to stop someone else
> from connecting using vncviewer, since they would not
> be prompted for a password?

/home/fred/.vnc/passwd on the client is not the same as
/home/fred/.vnc/passwd on the server. The vncviewer command above uses
the *client's* copy of that passwd file, not the server's.

--
Some say the Wired doesn't have political borders like the real world,
but there are far too many nonsense-spouting anarchists or idiots who
think that pranks are a revolution.

On Mon, 16 Feb 2004 03:07:04 +0000, Owen Jacobson wrote:

> On Sun, 15 Feb 2004 14:44:29 -0500, somebody wrote:
>
>> [quoted text muted]
>
> /home/fred/.vnc/passwd on the client is not the same as
> /home/fred/.vnc/passwd on the server. The vncviewer command above uses
> the *client's* copy of that passwd file, not the server's.

That explains it!

-Thank you