Unoffical empeg BBS

Quick Links: Empeg FAQ | RioCar.Org | Hijack | BigDisk Builder | jEmplode | emphatic
Repairs: Repairs

Topic Options
#246558 - 15/01/2005 00:10 Is WinVNC secure? Is there a better choice?
Dylan
addict

Registered: 23/09/2000
Posts: 498
Loc: Virginia, USA
I'm tired of driving an hour to my Mom's house when she needs me to do something on her computer. I want to set up remote access. WinVNC is the only program I'm familiar with as we use it around the office. Is it safe to open up a port on her firewall and leave VNC server running with password protection?

Top
#246559 - 15/01/2005 00:27 Re: Is WinVNC secure? Is there a better choice? [Re: Dylan]
mschrag
pooh-bah

Registered: 09/09/2000
Posts: 2303
Loc: Richmond, VA
A better option might be to setup an ssh server and you can tunnel anything securely over it:

Some info from a commercial product:
http://www.bitvise.com/remote-desktop.html

I believe cygwin has an sshd as well (free)
Edit: http://pigtail.net/LRP/printsrv/cygwin-sshd.html


Edited by mschrag (15/01/2005 00:29)

Top
#246560 - 15/01/2005 01:41 Re: Is WinVNC secure? Is there a better choice? [Re: Dylan]
hybrid8
carpal tunnel

Registered: 12/11/2001
Posts: 7738
Loc: Toronto, CANADA
I just use Windows XP's own Remote Desktop. And a client for Mac OS and/or Windows 2000. Hell, I'm in San Francisco right now and controlling downloads of some missed TV on my home machine. Last week while in Vegas I even downloaded episodes of Lost and Alias to the hotel room so my GF and I could watch them at a cabin in the Grand Canyon.

Bruno
_________________________
Bruno
Twisted Melon : Fine Mac OS Software

Top
#246561 - 15/01/2005 01:45 Re: Is WinVNC secure? Is there a better choice? [Re: Dylan]
mlord
carpal tunnel

Registered: 29/08/2000
Posts: 14496
Loc: Canada
VNC will be safe enough, though mostly due to obscurity. Much better is to run SSH (as already suggested), and then use it's "port redirection" capability to run VNC inside it (without VNC even being aware that it's happening.. Cool!).

Cheers

Top
#246562 - 15/01/2005 12:14 Re: Is WinVNC secure? Is there a better choice? [Re: mschrag]
Dylan
addict

Registered: 23/09/2000
Posts: 498
Loc: Virginia, USA
I'll go with SSH and TightVNC. Those instructions are great, thanks!

Top
#246563 - 15/01/2005 19:56 Re: Is WinVNC secure? Is there a better choice? [Re: Dylan]
bonzi
pooh-bah

Registered: 13/09/1999
Posts: 2401
Loc: Croatia
Perhaps you could, for good measure, restrict IPs from which her router accepts connections.
_________________________
Dragi "Bonzi" Raos Q#5196 MkII #080000376, 18GB green MkIIa #040103247, 60GB blue

Top
#246564 - 16/01/2005 13:56 Re: Is WinVNC secure? Is there a better choice? [Re: Dylan]
SuperQ
addict

Registered: 13/06/2000
Posts: 429
Loc: Berlin, DE
VNC's authentication processes perfectly safe. no plain text password exchange. the connection itself is not encrypted.

If you're worried about someone sniffing your session, there are some vnc addons for stream encryption.

http://www.realvnc.com offers and enterprise edition with 128bit AES
http://www.laplink.com/products/vnc/overview.asp has built-in ssl encryption

for admining a home PC, you've got nothing to worry about with regular VNC. I'm normaly a paranoid when it comes to network traffic, and I don't worry about VNC.
_________________________
80gig red mk2 -- 080000125
(No, I don't actually hate Alan Cox)

Top