Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Applications > How safe/secure is a VNC connection?

How safe/secure is a VNC connection?
Thread Tools
Dedicated MacNNer
Join Date: Mar 2001
Status: Offline
Reply With Quote
Mar 4, 2008, 02:17 PM
 
Hi,

I use Vine VNC Server a lot, along with Chicken of the Sea viewer, to remotely access my home Mac from work.

At the moment, if I think I'm going to need to access my home Mac I start Vine Server before I leave for work and when I've finished VNC'ing I remotely shut down the home Mac.

What I would ideally like to do is leave Vine's System Server running all the time that my Mac is on, so that I don't have to remember to launch it etc etc. But I'm worried about someone else being able to access my Mac, perhaps with their own VNC viewer or by more sinister methods. I have what I think is quite a strong password (it is random letters and numbers).

I have Leopards Firewall switched to Set access for specific applications and have also enabled Stealth Mode. I think the firewall in my D-Link 634 router is switched on (never been 100% certain). In the router set-up I've configured VNC in Virtual Server for Always access.

If anyone has any advice or guidance, it would be greatly appreciated.

As always, many thanks,

Matthew
Early 2008 Mac Pro (8 x 2.8), original Core Duo 2.0GHz MacBook Pro
     
Posting Junkie
Join Date: Oct 2005
Location: Houston, TX
Status: Offline
Reply With Quote
Mar 4, 2008, 07:52 PM
 
It's not. You should tunnel it over ssh.
     
Mac Elite
Join Date: May 2001
Location: Vancouver
Status: Offline
Reply With Quote
Mar 4, 2008, 09:29 PM
 
About to say the same thing; tunneled over an SSH connection, it's fine. Otherwise...
Macbook (Black) C2D/250GB/3GB | G5/1.6 250GBx2/2.0GB
Free Mobile Ringtone & Games Uploader | Flickr | Twitter
     
Clinically Insane
Join Date: Jun 2001
Location: planning a comeback !
Status: Offline
Reply With Quote
Mar 4, 2008, 10:00 PM
 
I stopped using VNC once LogMeIn became available for Macs. Encrypted, no firewall issues, far less hassles.

-t
     
Dedicated MacNNer
Join Date: Mar 2001
Status: Offline
Reply With Quote
Mar 5, 2008, 07:49 AM
 
Thanks for all the replies.

I'll have to check out LogMeIn.

But in the meantime, how do I make a SSH tunnel? I'm guessing not by using a SSHovel

If anyone could take a moment to help with this, I'd really appreciate!

Thanks again,

Matthew
Early 2008 Mac Pro (8 x 2.8), original Core Duo 2.0GHz MacBook Pro
     
Clinically Insane
Join Date: Jun 2001
Location: planning a comeback !
Status: Offline
Reply With Quote
Mar 5, 2008, 08:13 AM
 
Matthew,

SSH tunnels ae not rocket science, but they are also not trivial.
After much time, I got them running back in the day, but I wouldn't know how to do it right of the bat.

I'd strongly urge you to check out LogMeIn. It will make your life so much easier, and it is cross-platform (Mac and PC).

-t
     
P
Moderator
Join Date: Apr 2000
Location: Gothenburg, Sweden
Status: Offline
Reply With Quote
Mar 5, 2008, 09:00 AM
 
To make a tunnel from the terminal, use the syntax:

ssh -L 1234:targethost.com:5678 user@tunnelhost.com

tunnelhost.com is the computer you log on to. You make the tunnel between your computer and that one. targethost.com is the computer you ultimately want to connect to. It can be the same as tunnelhost.com - if it is not, the connection is only encrypted between you and tunnelhost, but unencrypted between tunnelhost and targethost.

1234 is the portnumber to listen on on your computer - should be bigger than 1024. 5678 is the portnumber you connect to on targethost.com. For VNC, that number should be 5900. Once the tunnel is open, use your VNC client to connect to localhost:1234 and work as usual.
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 09:12 AM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2