VNC password in the registry is easily crackable--not secure

scottcopus · Post by **scottcopus** » 2007-03-22 21:53

It's too easy to "decrypt" the VNC password that's in the registry with the VNC password cracking tools that are easy to find. Can the VNC password that's stored on the local system be made to use 1-way encryption and not 2-way?

For example, use MD5 to store the password. If the incoming password is MD5'd and matches the stored MD5 password, then let the user log in.

This is a really bad security problem... especially for people who support lots of computers that use VNC as their only remote-control tool. Otherwise, I think UltraVNC is still the best of the VNC family. Kudos to the developers.

Scott

mattice06082 · Post by **mattice06082** » 2007-03-26 23:31

Have you looked at the encryption http:// msrc4plugin.home.comcast.net/?

VNC password in the registry is easily crackable--not secure

VNC password in the registry is easily crackable--not secure

Re: VNC password in the registry is easily crackable--not se