I have some questions about simple source code modification.
- By default, the standard DES fixed key is 23,82,107,6,35,78,88,7. If i
change this key in the vncserver, i need to change it too in the vncviewer,
and then, the only viewer which can connect to my vncserver, is the one i've
compiled with my personnal DES key, right ? (i test it, it works)
So, is-it a good and simple security improvement for my vncserver or is it
totally useless XD ? ( if you not use an encrypted tunnel, i think it's
harder to get the password by bruteforce both challenge-response and DES
And then ^^ the vnc server/viewer is quite easy to modify in c++, but as a
non-java-nerd ;D i can't find where is this key in the java source code,
does someone know where is it ? (i prefer modifying the javaviewer, then my
customized viewer will wotk on every platform)
- By default the maximum password lenght is 8, and the challenge size is 16.
I didn't try it yet, but same questionq, is-it usefull? both viewer and
server need to be modified? will it block all non-modified viewer? and where
is it in this java source code XD ?
Special questions ;D: what's the maximum value? and are another
-How to force, in the source code, the encoding options ? i want the server
only accept connection using the so efficient tight encoding.
-I know ZVNC have a encrypted (ZeBeDe) algo built in (i've got the source
code, thanks to its author), But it's not maintained anymore, does someone
know another encrypted VNC ? I know Laplink Secure VNC, but it doesn't work
for me (i guess it's not that easy to replace the standard Socket by a
SSLSocket or another).
I've tryed Laplink Secure VNC (SSL built in), but it doesn't wotk for me,
only loopback connection works (which are not SSL) if i want to connect to a
remote computer with Laplink Secure vnc server/viewer, there's no reponse
(not even the failed connection message). I got the exact same problem when
i tried to use SSL with an external tunneling. Does anyone knows this
problem. if i tried another viewer (real/java/Tight) on the Laplink server
i got the failed connection message. I tried the Laplink viewer on
real/tight server and it's work.
I will try SSH tomorrow, but even SSH tunneling will works, it's easier to
remote install on NT machine (which have none VNC yet of course XD) and
register as a service, etc... when all it's built in. A simple batch file is
all i need ^^.
Thanks in advance
Hotmail : un compte GRATUIT qui vous suit partout et tout le temps !