AutoUpdate/self update

[X3]

I actually use ultravnc over the internet (different countries) to manage networks that been previously set up, I started using ultravnc fairly recently.

One feature that would set my mind at rest is if Ultravnc was able to self update (notify admin of available updates) keeping same setting's from both server and client side so that when a session would then be initiated we could all benefit from latest security updates and bugfixes...

I ear some of you thinking that the betas or RC candidates may not be recommended for production systems and so on...

Well if its alright I propose making this a setting e.g.

Autoupdate/Self update notification enabled check/uncheck
Allow auto update to stable builds only (recommended) check/uncheck
Allow auto-update to beta or RC builds (not recommended) check/uncheck

and of course let users decide what best course of action....

Got my vote for this feature, who else is with me on this?

[Rudi De Vos]

Not possible.

VNC upload independed a file : HIGH risk
VNC install a file as admin: HIGH risk

We can provide setup.update.exe, but YOU need to download, logon as admin and run....
Settings in 104 are in a seperate ultravnc.ini file. This file is not removed on uninstall, so an update has the same settings. You can also use this file (copy/paste) to fast deploy the same settings on several servers.

[X3]

bummer

Well after thinking the risks implicated I still cant help to think if windows self updates (with notification) Antivirus and firewall do same and so on and on, why would it be more or less a risk if it was a controlled and obviously user choice only to proceed with such updates....

Your suggestion of providing a UVNCupdate.exe is a step in right direction, as long as the program, notifies sys admin that such update is available. At the moment that is not so.

I know at this point rationalizing my point of view makes no difference when you a developer already tinks is a bad idea not to mention you are the developer. So I guess this may be dead in the water.

Thanks for all the fish anyway.

[redge]

why not ?
Add update checker to help of vncviewer like many software have ?
I don't think is risky. only admin can install/update software.

[Rudi De Vos]

A time ago we had a simple menu button that open our website.
We fast got a mail, that this allowed a guest user to gain admin access.
The server play with users and permissions to be able to inject keyboard and capture even the protected MS stuff.


The viewer, run as current user (no service).
The viewer could check and notify user of an update, but he only can check viewer version.. viewer doesn't knwo server version.

[redge]

A time ago we had a simple menu button that open our website.

you right,

The server play with users and permissions to be able to inject keyboard and capture even the protected MS stuff.

My mind, is'nt a bug of coding, missing protect code of exploit exe url ?
I could be totally wrong.

[Rudi De Vos]

Veified
In 104, web access is protected. Auto update could be added secure.

Forgot that the whole service now run in session0, and is seperate from winvnc. Elevated code parts are started as seperate process.

But are protected by a user ack. Sample: If you make changes to settings some popup ask permission or allow you to enter admin/passwd.

Perhaps something for later...first bug fixing to get it final runnning proper.

[X3]

we now have a polls enabled on suggestion forums through-out courtesy of Oliver the admin Assarbad, I have taken liberty of with redge's suggestion to put up the poll for this suggestion as well

So whatever the you opinion is please get voting and show the devs what you think....

On another note its good to see that Rudy is now on board with this. thanks man.

Bugbashing I hear you say? great idea. when's Uvnc 2 comming out roadmap??