Security Basics mailing list archives

Re: Accessing corporate servers through the web..


From: "Chris Berry" <compjma () hotmail com>
Date: Mon, 17 Nov 2003 19:45:32 -0800

From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
> (d) VNC (win 2K server)

Most VNC servers I know of don't support encryption (there may be
others), so you are again transferring unencrypted data through the net.
And I fail to see why one would want to use VNC on a Windows 2000
server.

You can work around the problems of weak or no encryption by using VPNs
or encrypted tunnels and the like, but that may not be feasible in any
case. What are you trying to accomplish, if i might ask?

Simple, it's free and crossplatform. If you run it through ssh or a similiar encrypted tunnel, it's also secure and easy to use. Terminal services takes money and only works on windows.

Chris Berry
compjma () hotmail com
Systems Administrator
JM Associates

"Ok, so the servers are down, the lights are out, and all I have to work with is a roll of duct tape, a ball point pen, a lighter, and a twenty year old copy of emacs. Where's the problem?"

_________________________________________________________________
Great deals on high-speed Internet access as low as $26.95. https://broadband.msn.com (Prices may vary by service area.)


---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to simplify the management and deployment of PGP and reduce overall PGP costs by up to 80%. FREE WHITEPAPER & 30 Day Trial - http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027 ----------------------------------------------------------------------------


Current thread: