Bugtraq mailing list archives

Re: Security of "Virtual Network Computer"


From: bluca () COMEDIA IT (Luca Berra)
Date: Wed, 13 Oct 1999 14:34:07 +0200


On Tue, Oct 12, 1999 at 09:51:52AM +0200, Mikael Olsson wrote:

Would you allow vanilla telnet to your protected machines?
Probably not.
If you need to run VNC over an untrusted network: tunnel it through
something More Secure(tm) such as SSH or IPSec.

I'd also like to add that Ray Jones (rjones () pobox com)
made some patches to vnc to add SSL, these can be fetched
at http://web.mit.edu/thouis/vnc/

--
Luca Berra -- bluca () comedia it
    Communications Media & Services S.r.l.



Current thread: