Ultr@VNC

[irishcrazy2005]

Hey guys,
I have a question about this sweet new program that I got off of the list that RainDawg provided for the top 46 freeware programs. It is called Ultr@VNC and it is a remote computer control application. Basically it runs a little server on your computer and then you can use a web based java applet to see and control the computer from a remote location. To use it I had to put holes for ports 5800 and 5900 in my firewall.

Now, my friend has raised a question that I don't know the answer to. Does this kind of program make you more vulnerable to a hacker attack? It is password protected, I think that I forgot to mention that before. Thanks for any help.

-Phil

[bowman]

yes it does.

if you use windows xp, you can do even fancier things with remote desktop connection

[irishcrazy2005]

yes it does.

if you use windows xp, you can do even fancier things with remote desktop connection

Is the remote desktop connection more secure? Is there any way that I can make this loophole more secure? Is it even something I should worry about?

-Phil

[RainDawg]

Actuall, that was Five who posted the link to that page ;) Gotta give credit where credit is due.

That being said, I know nothing about the aforementioned topic so will not comment of the safety of remote desktop. But....my gut tells me it could open a gaping security hole if the software was not well-written.

[irishcrazy2005]

Actuall, that was Five who posted the link to that page ;) Gotta give credit where credit is due.

Oops, my bad! I knew that I was taking a gamble when I was too lazy to go back and look! Sorry Five! :wave:

[irishcrazy2005]

OK, basically what I am looking for here is whether or not the security risk of this program is very high. Should I not be using it? Is there something better to use? Thanks again for any help.

-Phil

[uhclem]

I use that program and it's a good one. I am not aware of any serious security concerns with it, i.e. bugs or hacks. But obviously any program that gives total access to your computer via the internet is a risk. Be sensible when you use it. Make sure you have a good password, change it frequently, and don't leave the server running when you don't actually need it. Also, you don't have to use the recommended ports; you can use whatever ports you want, afaik.

[saltman]

Use of that program does not make you less secure than any other open port.. if it opened a broad range for some reason than yes it would be much easier for a trojan to get through. I would think nowadays people using trojans would inject them into other processes anyway like IE and tag along on their ports or whatever anyway so I wouldn't worry about it. It is a good management practice to not leave the server running when you don't need it like previously mentioned. Having open ports generally is only a problem once you have a trojan on your system if you have other security items in place.

[saltman]

I guess what I mean is it would be allot of trouble to hack the client part of your software, port scan for people using the program, etc... than are allot easier ways to take control of your computer with allot better programs if someone was specifically targeting you.. if they weren't specifically targetting you their are allor more popular programs to hack that would get allor more unsuspecting zombies.

[Five]

Oops, my bad! I knew that I was taking a gamble when I was too lazy to go back and look! Sorry Five! :wave:
thassok!

I think it's the correct time to say "I've been z0rked!"

[RainDawg]

I never did find out what that means? z0rk?