Hashed deault password

[hydrian]

Ello,
I'd like a recommend a security enhancement. I know that UltraVNC used the store the default VNC password in clear text in the registry. This allows a bad admin or program to scavenge the passwords if it happens to to have access to the registry key.

I propose that we should store the default password in a one way seeded hash. This way if a registry entry is left insecure (default installation) even is the entry is read, the default password is not known.

[Rudi De Vos]

There is no default password, the initial password has a random value.
The password is saved the ultravnc.ini file with some weak des encryptionn, we don't use the registry.

The password is encrypted with some weak des encryption as the server need to be able to decrypt.