Hacker Exposed Thousands Of Insecure Desktops

[HardOCP News]

Most of you guys know that you should always secure your VNC (Virtual Network Computing) connection by using a username and password. It's just common sense. This is an old topic that rears its ugly head every so often but people still don't learn that, if you don't use a password for VNC, you could end up compromised. At the very least, screenshots of your desktop and you IP could end up on one of these websites.

Revolver created a script that cycled through IP addresses and select ports on his own server, which tries to connect to unsecured servers through a web-based VNC viewer. If the script finds an available connection without any authentication, it will connect and grab a screenshot, otherwise the script will kill the session and move to a different IP address. After thousands of successful connections, he now has about 23 gigabytes of screenshots saved.

 

[CreatedTheMultiverse]

Terrorists use usernames and passwords so....think of the children. If you have nothing to hide, not using usernames and passwords is nothing to fear.

#EndPasswordPrompts

 

[Osirus]

VPNs provide an encrypted tunnel for network traffic. Terrorists and drug dealers might use them!

They must be banned, for the safety of children! Save us, Senator Feinstein!

 

[Ur_Mom]

VPNs provide an encrypted tunnel for network traffic. Terrorists and drug dealers might use them!

They must be banned, for the safety of children! Save us, Emperor Feinstein!

FTFY.

Secure your shit. Even if it's just a simple password, it's better than nothing like this. Having a script just try and connect with no authentication? That's easy. So easy to add a password, too.

 

[FLECOM]

VPNs provide an encrypted tunnel for network traffic. Terrorists and drug dealers might use them!

They must be banned, for the safety of children! Save us, Senator Feinstein!

what do VPNs have to do with VNC?

 

[FLECOM]

also LOL at their site being immediately hacked

 

[Dead Parrot]

At last, the password 12345 improves security!

 

[Draxanoth]

Wait, wait, wait.... VNC is still a thing?

 

[Dekoth-E-]

I wasn't aware it was possible for a machine to be insecure.

 

[Sacrilego]

And just like that, the vnc roulette site has been hacked.

 

[heatlesssun]

Wait, wait, wait.... VNC is still a thing?

Think TeamViewer or Remote Desktop.

 

[PersonalJ]

And just like that, the vnc roulette site has been hacked.

That's the best defacement page I've ever seen.

 

[jojo69]

wow...just wow

 

[FLECOM]

Wait, wait, wait.... VNC is still a thing?

I know a government agency that has VNC on every workstation

 

[funkydmunky]

Anyone have a recommended VNC. UltraVNC keeps giving me issues with Win10.

 

[DocSavage]

Anyone have a recommended VNC. UltraVNC keeps giving me issues with Win10.

RDC is already included, secure as far as I know, and free.

 

[Ur_Mom]

We use RealVNC.

I use Teamviewer for my personal stuff (RDP to the home server, though).

 

[sk3tch]

That's the best defacement page I've ever seen.

It really is. For anyone curious - that's Speaker Knockerz - Count Up. Free on Amazon Prime Music or here.

 

[MikeRotch]

Anyone have a recommended VNC. UltraVNC keeps giving me issues with Win10.

I use TightVNC server on my Windows 2012 R2.
Clients I use regularly to connect are TightVNC client on work win7, TightVNC client on home win10, Jump for my Android (use to use Jump for BB10).

 

[funkydmunky]

I will try Real and Tight. I am looking for speed being local server control. Will try them out. Thanks.

 

[funkydmunky]

I am used to traditional VNC, what is Teamviewer best suited, and not suited for?
I always thought it was for games.