VNCrack (just so you know it exists)

[Matthew C. Grab]

How may people know about this?  I use VNC over the net w/o SSH.  I'll
have to start installing all those extensions that people have been
writing for VNC.  Or Zebedee or something.  I'm apparently not a pro
either.  I had a client who wanted an internally secure network.  I gave
them a switch and a firewall.  I didn't think a switch would allow
sniffing.  I guess I was wrong.

I don't think we'll ever be able to keep out the wrong people.

Matt


Jonathan Morton wrote:
> 
> I'm definitely not a pro-level net admin.  However I do know that this
> student network is built using 10baseT and 10base5 backbone with few if any
> intelligent switches - probably just a huge series of "managed hubs".  My
> own switch, which exists purely to isolate my own small LAN from the bulk
> of the student traffic, is a very simple D-link box with no configuration
> options.  I'd like to take a look at dsniff - after I did move the 486 off
> the switch and onto the main segment, PHoss picked up someone's e-mail
> password within 30 seconds - and this was at 3am.  Needless to say, i'm not
> using this information...
> 
> (gulping down coffee for an Electronics exam in a few...)
---------------------------------------------------------------------
To unsubscribe, send a message with the line: unsubscribe vnc-list
to majordomo "at" uk.research.att.com
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------