UltraVNC

I moved and Comcast "transferred" my account to the new house, but didn't transfer my email or web pages. Or my ID for that matter. The site was down while I yelled at Comcast from my Hotel room for two days before I got everything back.

Sean

I haven't been working on any of them recently. Sam/Rudi sent me some code awhile back to test, but I've been swamped. It was a modified MSRC4 plugin. Hopefully I'll get some time to get back at it soon.

Sean

I've completely lost track of the problem we're trying to solve. The plugins use a very secure method of encryption. The only recent vulnerability that came up was that with a pre-shared key, and the fixed RFB protocol exchange, the encrypted data for the first 12 (I think?) characters was always ...

The plugin looks in a number of places. One is "the directory the plugin is running out of" which is determined at runtime. Some others are hard coded. If you run the viewer, and enable the plugin, and then click on Configure you'll see a message of all the places it looked for the plugin, and if it ...

The session key is never exchanged over the wire with the plugins. The session keys are derived from the password, a random IV, and a random SALT. The SALT and IV are not "secret" information and are exchanged over the wire. These parts are used to derive a session key on both ends. The keys are ...

Sam,

Can I get the UltraVNC source and the plugin diffs so I can take a look?

Thanks,

Sean

Yeah, the last round of changes to the plugins to add IV and Salt made the MSRC4 plugin incompatible with wine. I must be using something that isn't supported (yet) under wine. The OpenSSL versions run just fine. The MSRC4 plugin gives LOTS of errors. Switch to the ARC4 plugin for similar ...

Version 1.2.0 and 1.2.1 would not connect between XP and 2000. 1.2.2 has resolved this issue. Download 1.2.2 from my website.

Sean

Sam, I don't think this is a very big issue. First off, you will only be creating a key container if one doesn't already exist, and this happens in the config dialog. Shouldn't be an issue. Second, you aren't accessing the same context with multiple threads. Each thread will maintain its own context ...

Depends on what you are doing when that happens. That particular message could mean LOTS of things. Give me some details and I'll see if I can tell you what is wrong.

Sean

Did it crash, or close? If it just closed it could be a timeout due to inactivity. If it crashed, did you get any error messages? Any details you can give me wil help.

Thanks,

Sean

My thought was it would be nice to pass the fully qualified path and filename of the key file to the plugin. It would be nice if that parameter were also saved in the .vnc file. That would make it a nice shortcut to a specific plugin and keyfile. Of course, if you make it generic enough to pass more ...

Sam, I get 1 to 2 Emails a month asking why the plugin breaks multiple connections. I only get 3-4 Emails total about the plugin a month, so half of them are about this issue. :wink: I'm more than happy to make needed changes to the plugin. When can I get a beta to test with? Any chance of getting ...

please respond in this topic:

[topic=8202][/topic]

Sean

I REALLY wanted to dump the registry version. Its not very portable to kiosk and low-access machines. Keeping it in the code complicates things... What is it about the registry version that you need? Could the same thing be accomplished with an INI file? Is it just the selection of the key file? Is ...

The UltraVNC viewer and DSM run great from a USB memory stick.

Sean

I think you mustundertand keyed vs. keyless connections. Either way no one can connect to your machine, unless of course, they already have your password... Here is how that works keyless: On both sides, the password is retrieved. On the server, from the registry. On the client, from the password ...

You can safely deploy the plugins KEYLESS if you are using strong passwords. Here's how that would work: Deploy the plugin to the ends of the earth... User starts viewer. The viewer queries the plugin, "you need a password?" The plugin says "Yes" The viewer passes the plugin the pasword. The viewer ...

You still haven't solved your INITIAL PROBLEM. In fact, you have significantly complicated it. :yell: IF YOU CAN'T CONNECT WITHOUT THE PLUGIN, YOU WILL NEVER GET ANYTHING ELSE TO WORK!!! :yell: You need to start back at the basics, but since you won't listen to me, I can't help you. When you are ...

Actually the message has nothing to do with plugins at all. What it IS saying is that during the intial connection attempt, when it tried to negotiate the RFB Protocol version, it got an unexpected response. Possible reasons for this are many, INCLUDING, but not limited to, a plugin on one and and ...

You said in one of your above posts that you cannot connect WITHOUT the plugins? Is that still true? If so, you need to get that working first. First over the LAN, and then from the office. If that is working, then get the plugins working. Otherwise its just too confusing to troubleshoot exactly ...

That's the log from the SERVER, good. Now I need the log from the VIEWER.

Sean

That would require a change to UltraVNC.

I need the msrc4.log from both the server machine and the viewer machine.

Sean

My website has instructions on how to turn on logging.

http://msrc4plugin.home.comcast.net/tro ... oting.html

Sean

So, you tested with NO plugin, and it worked. Then you went into the server, and selected the plugin, clicked on configure to make sure it was finding the key, then hit apply to use the plugin. Did you do this AT the server, or remotely over VNC? Either way, just for fun, restart the server service ...

BTW, what changed a few days ago? Anything? Anything at all?

Sean

Did you try a straight VNC connection, no SC? Can a viewer and server connect in your currect configuration? Get that working before you bring in the further complication of a SC connection.

Sean

You need to be using 1.1.8 OR 1.2.2, and it needs to be the same version on both sides. You should NOT be running 1.2.0/1.2.1. They were NG. They especially didn't work if one side was XP and the other was 2000. 1.2.2 is here: http://msrc4plugin.home.comcast.net/msrc4plugin.html 1.1.8 is here: http ...

Does the connection work without the plugin? You need to be using 1.1.8 OR 1.2.2, and it needs to be the same version on BOTH sides. You should NOT be running 1.2.1. It is NG. 1.2.2 is here: http://msrc4plugin.home.comcast.net/msrc4plugin.html 1.1.8 is here: http://msrc4plugin.home.comcast.net ...