full-disclosure - Re: VNC viewers: Clipboard of host automatically sent to remote machine

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAJB2JzuZtTW0YimLDtb4JjwcHRULgx_3duLzkGdXxUfb_MSm-A@mail.gmail.com>
Date: Wed, 25 Jan 2012 10:48:38 +0100
From: Mario Vilas <mvilas@...il.com>
To: Ben Bucksch <news@...ksch.org>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: VNC viewers: Clipboard of host automatically
 sent to remote machine

>> IP KVM, in which the foreign server basically gets only inbound
>> Keyboard and Mouse and outbound uncompressed pixels.
>
> That is *precisely* what VNC is: an open-source IP KVM.

No, it's not. I won't go into the differences because other people
already did in this thread.

> And please don't turn this into "you're stupid", because I've seen
> others with the same setup. As mentioned, I know of a government agency
> with highly competent IT staff who had a similar setup: normal and
> sensitive work is on the desktop/notebook and Internet access (which is
> considered insecure) is on a remote machine, with a viewer on the desktop.

That proves nothing. For example, there are many SCADA devices owned
by government agencies  connected to the Internet, but that doesn't
mean it's a good idea to do so.

-- 
“There's a reason we separate military and the police: one fights the
enemy of the state, the other serves and protects the people. When the
military becomes both, then the enemies of the state tend to become
the people.”

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/