Passwords in VNC Personal Edition for Windows

[Garth A. Reid]

Hi James,

At the time of the two incidents, they were running the free version of
RealVNC. 

As they were working on their systems, the mouse cursor started moving and
clicking on things that the owner of the system wasn't doing.

Since the first such incident, I've upgraded my system and two other systems
to VNC Personal Edition P4.2.6 and set a preference for encrypted. For the
system involved in the second incident, I've changed their free edition to
"Prompt local user to accept connections." They had another attempt that
they stopped by not accepting the connection.

Please let me know if you need more information.

Regards,
-g  

-----Original Message-----
From: James Weatherall [mailto:jnw "at" realvnc.com] 
Sent: Wednesday, October 18, 2006 11:50 AM
To: 'Garth A. Reid'; vnc-list "at" realvnc.com
Subject: RE: Passwords in VNC Personal Edition for Windows

Hi Garth,

When you sau "have had unexpected connections to their machines", can you be
more specific as to what exactly is happening?

Are the affected systems running VNC Personal Edition P4.2.3 or newer?

Regards,

Wez @ RealVNC Ltd.
 

> -----Original Message-----
> From: vnc-list-admin "at" realvnc.com
> [mailto:vnc-list-admin "at" realvnc.com] On Behalf Of Garth A. Reid
> Sent: 18 October 2006 17:57
> To: vnc-list "at" realvnc.com
> Subject: Passwords in VNC Personal Edition for Windows
> 
> I understand that RealVNC doesn't pass the password from the Viewer to 
> the Server in clear text. But I've had two instances where people I've 
> set up with RealVNC have had unexpected connections to their machines. 
> If these unauthorized users didn't pick up the passwords in clear text 
> transmissions, then how did they manage to connect? It appears that 
> they were able to get the password.
>   
> Thanks,
> Garth
> _______________________________________________
> VNC-List mailing list
> VNC-List "at" realvnc.com
> To remove yourself from the list visit:
> http://www.realvnc.com/mailman/listinfo/vnc-list