1.0.4 RC16 - Serious security issue - password truncation

[Csimbi]

It seems that 1.0.4 RC16 does not check the entire password; only a truncated portion of it.
Enter a long password in admin properties, for example:
mypassword2008
Now, log in with your client enter this pass:
mypassword20
It will work like a charm (I guess shorter ones will work, too).
I wonder how how you guys are passing any security reviews (well, I guess that there are none)...
Dunno if it has anything to do with the MSRC4Plugin122 - I am using a random key file and not the password.
You better check it out, or, warn the users that it is pointless to give strong passwords because they are open to attacks anyway.

[mod=494,1212218156]moved from bug report to beginner help,
vnc password only support 8 alpha digit and more than 8 are simply ignored[/mod]

[redge]

FAQ
[topic=7349][/topic]
[topic=3276][/topic]

[Csimbi]

Thanks redge,
this is fine, but I do not think that it is a good practice to bury such information in FAQs. It should be on the UI in one way or another - written as a label, or given as a warning when the user changes the password.
Would that be doable? Thank you.

***Edit
Fixed lame typo

[redge]

sorry, ultravnc is not known as user friendly User Interface (UI) and Help.
known as fast only.

I was asked for merging user interface of TightVNC (user friendly with sensitive help) and core of UltraVNC for the speed. this not exist maybe never.
I think both advantage are available trough commercial product of maker of vnc

[Csimbi]

Well, I would not think that adding a label to the UI or an additional check and a dialog when user presses ok would slow the program down.
Just a thought.