This is a major security problem! If your computer is not configured properly, it is possible that anyone with Internet access can view what is happening on your computer’s screen right now. The problem affects Windows, Macintosh, and Linux systems that use the very popular VNC software.
NOTE: All Macintosh systems have VNC installed although Apple calls it “screen sharing.” The software is turned off by default but many Mac users later enable it in order to remotely access the computer. If configured properly, there is no problem.
Virtual Network Computing (VNC) is a graphical desktop sharing system that allows for remote viewing and/or control of other computers. It transmits the keyboard and mouse events from one computer to another, relaying the graphical screen updates back in the other direction, over a network. The problem is that thousands of computers have VNC installed without a password, granting access to anyone who can find the address of the computer. Then, to make matters worse, a website called VNC Roulette seeks out these insecure computers and displays the screens to anyone. It also displays the I.P. address of the insecure computers so that hackers may return again and again.
Details may be found in an article by Zack Whittaker in ZDNet at http://goo.gl/2lujlR.
To view the insecure computers, go to http://vncroulette.com and then click on “Random Image” to cycle amongst the computers. You should hope that one of your systems does not appear!
It strikes me that VNC Roulette is providing a great service by identifying insecure computers and drawing attention to the problems. It also allows for VIEWING the screens but not for taking control of the computers.
Categories: Online Privacy & Security