Tunnel your VNC connection over SSH. VNC security is really not, and is
usually set up so you drop straight to a desktop rather than a
username/password dialog. The VNC password itself can be brute-forced and
there's no lockout ability (last I checked).

Terminal services can be (and is by default) susceptible to the same; how
many of your clients have set remote account lock-out on Administrator? How
many have truly secure Administrator passwords? (It's wise to change the
Administrator account name and create a dummy account named Administrator,
btw. I also do this for Guest.) TS can be tunneled over SSH as well.

If you can, filter traffic on 5900/3389 to prevent brute-force attacks, if
an SSH tunnel isn't a viable option.

John

-----Original Message-----
From: tclug-list-bounces at mn-linux.org
[mailto:tclug-list-bounces at mn-linux.org] On Behalf Of Raymond Norton
Sent: Tuesday, June 01, 2004 7:15 PM
To: TCLUG Mailing List
Subject: Re: [TCLUG] something like gotomypc


>> so you are trusting a third party with remote access to your computers?
>
> Even if you trust the people at gotomypc, how long will it be before
> their system is hacked or someone figures out how to spoof the clients.


Well......, the reason for the post is so I can do it without a 3rd party.



_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
Help beta test TCLUG's potential new home: http://plone.mn-linux.org
Got pictures for TCLUG? Beta test http://plone.mn-linux.org/gallery
tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list