Anyone ever seen this? Someone just hacked into my Mac

Ye' old general discussion board. Basically, for everything that isn't covered elsewhere. Come here to shoot the breeze, shoot your mouth off, or whatever suits your fancy.
This forum is not for asking programming related questions.

Moderator: General Moderators

User avatar
Kieran Huggins
DevNet Master
Posts: 3635
Joined: Wed Dec 06, 2006 4:14 pm
Location: Toronto, Canada
Contact:

Post by Kieran Huggins »

I've used UltraVNC for years (it's a variant of tightVNC I think) with no problems - I just use the default password settings (with my own password of course).
User avatar
JayBird
Admin
Posts: 4524
Joined: Wed Aug 13, 2003 7:02 am
Location: York, UK
Contact:

Post by JayBird »

Kieran Huggins wrote:do you have a password set in VNC?
Yep, and i changed it a couple of times, and i kept seeing the same thing happening
User avatar
Chris Corbyn
Breakbeat Nuttzer
Posts: 13098
Joined: Wed Mar 24, 2004 7:57 am
Location: Melbourne, Australia

Post by Chris Corbyn »

Jenk wrote:VNC is quite weak for security. I don't know of any other free alternatives.
Well, I'd use Timbuktu for OS X because it's an actual remote-desktop client like RDP. It's expensive though and I'm not that lazy that I can't just walk up my stairs to get to the Mac :P

~Keiran, yep it's passworded. There are various other settings to only allow one client at a time etc. The server is VineServer (OSXVnc) and the client was TightVNC.
User avatar
Kieran Huggins
DevNet Master
Posts: 3635
Joined: Wed Dec 06, 2006 4:14 pm
Location: Toronto, Canada
Contact:

Post by Kieran Huggins »

wow - that's kinda scary.. I guess what's kept me safe is using a non-standard port - I'll have to do some more reading about this tomorrow!
User avatar
feyd
Neighborhood Spidermoddy
Posts: 31559
Joined: Mon Mar 29, 2004 3:24 pm
Location: Bothell, Washington, USA

Post by feyd »

A friend of mine will use SSH to turn on the VNC server on his box in the event he needs it, which is rare.

I just use SSH. Image
User avatar
Chris Corbyn
Breakbeat Nuttzer
Posts: 13098
Joined: Wed Mar 24, 2004 7:57 am
Location: Melbourne, Australia

Post by Chris Corbyn »

feyd wrote:A friend of mine will use SSH to turn on the VNC server on his box in the event he needs it, which is rare.

I just use SSH. Image
That's what I do :) I SSH to the box, start VNC up, then connect over VNC. That's how I killed VNC so quickly. I didn't background the process so all I had to do was bounce back to my PuTTY window and CTRL+C. I don't like running services all the time if they're only used occassionally. Especially not something that could potentially lead to someone sat watching you type your bank details into online banking.
User avatar
Ambush Commander
DevNet Master
Posts: 3698
Joined: Mon Oct 25, 2004 9:29 pm
Location: New Jersey, US

Post by Ambush Commander »

Make VNC only accept loopback connections. Then access VNC using SSH tunneling. (This is, of course, granted you're not doing that already).

I keep WinVNC on all the time, and it bugs me a little. What command are you using to turn it on?
Post Reply