Re: VNC

Megan Golding wrote:

>On Wed, 2003-01-29 at 13:08, Marty wrote:
Well, enforcing the VNC-over-ssh with port filtering would definitely fit the bill, IMO, but that adds a (small) layer of work on top of it. The issues with VNC seem to mostly be:

--trivially encoded passwords, with a well-known/reversible hash and salt --the simple ability to brute-force the password

In investigating VNC, I also found that you can (somewhat) mitigate the latter problem by enforcing a "lockout after $num failed attempts.

-g

-- 
Glen Mehn		glen@myvest.com
Systems Administrator	MyVest, LLC