Re: [AG-TECH] FYI - VNC attacks

[John Hodrien <johnh@xxxxxxxxxxxxxxxx>]

On Thu, 8 Jun 2006, Andrew Daviel wrote:

> So, make sure you turn off VNC when not required, at least until we
> figure this out ....

Obviously you need to update when vulnerabilities are announced (although you
still would have been protected in this case) but running the vnc server in
presentation only mode (look but don't touch) is a good strategy.  More often
than not you're using VNC to demonstrate something, and you can simply switch
it over to allow remote control as and when it's required, or run a second vnc
server on a filtered port.

jh

--
"Persecution was at least a sign of personal interest.  Tolerance is composed
 of nine parts of apathy to one of brotherly love."  -- Frank Moore Colby