World of VNC (opens in new tab)

(worldofvnc.net)

75 pointsmhays10y ago38 comments

38 comments

38 comments · 18 top-level

sebtoast10y ago· 5 in thread

Browsing those are fun. I wonder what that is http://i.imgur.com/c796ANj.jpg

koolba10y ago

It's a grain elevator.

TheCapn10y ago

First guess is a grain dryer

protomyth10y ago

Those are not cheap pieces of equipment to run and I hope like hell it is not remote controllable. You can make or break an elevator operation by how you deal with moisture.

sebtoast10y ago

That makes sense, thanks.

mhurron10y ago

I was surprised I did not see porn.

vhold10y ago· 4 in thread

Geezus he included the hostnames and IPs? This is so insanely irresponsible.

bradbeattie10y ago

Could be worse: http://www.insecam.org/

lisivka10y ago

Nice one: http://www.insecam.org/en/view/257447/

sushisource10y ago

I'd argue it's responsible. Security through obscurity is no security at all.

stirner10y ago

Avoiding security through obscurity is a topic for people in the crypto industry. Random people with misconfigured VNC servers most likely aren't computer experts, and revealing their addresses is pointless and irresponsible. Yes, maybe making this information public will cause them to fix their configuration. More likely, they will just be attacked.

bluedino10y ago· 3 in thread

>> I found 3567 servers that were unprotected.

That's pretty low for scanning the whole internet. Either VNC isn't used that much or I was simply expecting 10 times as many servers.

allthetime10y ago

I run an unprotected VNC server at home, but its not open to the world because I'm using a router that doesn't expose local ports, like most people.

iancarroll10y ago

Unprotected VNC servers != all VNC servers, or even weak VNC servers. You could probably brute force into a lot more, but that's definitely illegal.

achillean10y ago

It is low, Shodan has found more than 10,000 VNC that have disabled authentication:

https://www.shodan.io/search?query=rfb+authentication+disabl...

And there are roughly 550,000 VNC servers on the Internet:

https://www.shodan.io/search?query=rfb

drakmail10y ago· 2 in thread

After disabling an adblock have several new tabs with mackeeper site opened =(

Turned adblock on again

sosuke10y ago

Yeah I saw the "please disabled adblocker message" with a cute cat. I then thought about what the site was doing and I decided to keep it on and close out the site instead.

worldofvnc10y ago

Not every ad network accepts my website. If you think my project is cool, please donate by using bitcoin or PayPal. Link is on the homepage.

Your support (with or without donation) is greatly appreciated!

nom10y ago· 2 in thread

That one is really weird: https://worldofvnc.net/browse.php?id=1107

I got no clue so far.. but so many questions!

lisivka10y ago

https://worldofvnc.net/browse.php?id=2136

niij10y ago

The font...

dang10y ago· 1 in thread

We had a major thread about something similar a few weeks ago: https://news.ycombinator.com/item?id=11367666. Is this story significantly different?

nacs10y ago

This site is actually up (unlike the roulette one) and seems to also show IPs (I don't think the previous one showed IPs).

1 more reply

plymb10y ago· 1 in thread

On this screen one can see the scanners ip: http://imgur.com/INXXlbI

eric_h10y ago

Ha! I wonder if whomever was using that VNC session had an "oh shit" moment there.

gherkin010y ago· 1 in thread

I like this one:

https://worldofvnc.net/browse.php?id=2677

It looks like the LCD display of some embedded system, something I would have never expected to see over VNC.

listic10y ago

An industrial controller: https://worldofvnc.net/browse.php?id=981

tux310y ago· 1 in thread

I'm interested to see that they only found 3567 open servers, whereas a scan I have from a couple years ago shows 7573 entries.

Now is it just a difference in scanned ports or a genuine improvement in security, I can't tell, but I can only hope.

achillean10y ago

Their numbers are too low. Shodan has found closer to 12,000 servers that have disabled authentication.

achtung66610y ago

https://worldofvnc.net/browse.php?id=177 I just hope it's not what it looks like

api10y ago

Sooooo many of these look so disturbingly like industrial process control... and this is on the HN front page... I think some people are gonna have a bad day.

ThatGuy12310y ago

Woa! https://www.twitch.tv/worldofvnc

varjag10y ago

https://worldofvnc.net/browse.php?id=2113 judging by the tab names, some Russian botnet HQ.

illumin810y ago

Here's a really funny one:

https://worldofvnc.net/browse.php?id=440

I wonder whether anyone connected and upgraded him to Windows 10...

varjag10y ago

This is terrifying.

So many live systems, from CNC lathes through den feeders and boiler controllers to entire city water treatment facilities..

lisivka10y ago

wind-farm: https://worldofvnc.net/browse.php?id=2116

paulojreis10y ago

Now, that's an ode to the Internet of (Shitty) Things (https://twitter.com/internetofshit?lang=en).

trhway10y ago

i think it is obligatory to mention that Intel CPUs (which have vPro enabled, ie. Xeons and some others) have VNC server built-in on the chip.

j / k navigate · click thread line to collapse

38 comments

38 comments · 18 top-level

sebtoast10y ago· 5 in thread

Browsing those are fun. I wonder what that is http://i.imgur.com/c796ANj.jpg

koolba10y ago

It's a grain elevator.

TheCapn10y ago

First guess is a grain dryer

protomyth10y ago

Those are not cheap pieces of equipment to run and I hope like hell it is not remote controllable. You can make or break an elevator operation by how you deal with moisture.

sebtoast10y ago

That makes sense, thanks.

mhurron10y ago

I was surprised I did not see porn.

vhold10y ago· 4 in thread

Geezus he included the hostnames and IPs? This is so insanely irresponsible.

bradbeattie10y ago

Could be worse: http://www.insecam.org/

lisivka10y ago

Nice one: http://www.insecam.org/en/view/257447/

sushisource10y ago

I'd argue it's responsible. Security through obscurity is no security at all.

stirner10y ago

bluedino10y ago· 3 in thread

>> I found 3567 servers that were unprotected.

That's pretty low for scanning the whole internet. Either VNC isn't used that much or I was simply expecting 10 times as many servers.

allthetime10y ago

I run an unprotected VNC server at home, but its not open to the world because I'm using a router that doesn't expose local ports, like most people.

iancarroll10y ago

Unprotected VNC servers != all VNC servers, or even weak VNC servers. You could probably brute force into a lot more, but that's definitely illegal.

achillean10y ago

It is low, Shodan has found more than 10,000 VNC that have disabled authentication:

https://www.shodan.io/search?query=rfb+authentication+disabl...

And there are roughly 550,000 VNC servers on the Internet:

https://www.shodan.io/search?query=rfb

drakmail10y ago· 2 in thread

After disabling an adblock have several new tabs with mackeeper site opened =(

Turned adblock on again

sosuke10y ago

Yeah I saw the "please disabled adblocker message" with a cute cat. I then thought about what the site was doing and I decided to keep it on and close out the site instead.

worldofvnc10y ago

Not every ad network accepts my website. If you think my project is cool, please donate by using bitcoin or PayPal. Link is on the homepage.

Your support (with or without donation) is greatly appreciated!

nom10y ago· 2 in thread

That one is really weird: https://worldofvnc.net/browse.php?id=1107

I got no clue so far.. but so many questions!

lisivka10y ago

https://worldofvnc.net/browse.php?id=2136

niij10y ago

The font...

dang10y ago· 1 in thread

We had a major thread about something similar a few weeks ago: https://news.ycombinator.com/item?id=11367666. Is this story significantly different?

nacs10y ago

This site is actually up (unlike the roulette one) and seems to also show IPs (I don't think the previous one showed IPs).

1 more reply

plymb10y ago· 1 in thread

On this screen one can see the scanners ip: http://imgur.com/INXXlbI

eric_h10y ago

Ha! I wonder if whomever was using that VNC session had an "oh shit" moment there.

gherkin010y ago· 1 in thread

I like this one:

https://worldofvnc.net/browse.php?id=2677

It looks like the LCD display of some embedded system, something I would have never expected to see over VNC.

listic10y ago

An industrial controller: https://worldofvnc.net/browse.php?id=981

tux310y ago· 1 in thread

I'm interested to see that they only found 3567 open servers, whereas a scan I have from a couple years ago shows 7573 entries.

Now is it just a difference in scanned ports or a genuine improvement in security, I can't tell, but I can only hope.

achillean10y ago

Their numbers are too low. Shodan has found closer to 12,000 servers that have disabled authentication.

achtung66610y ago

https://worldofvnc.net/browse.php?id=177 I just hope it's not what it looks like

api10y ago

Sooooo many of these look so disturbingly like industrial process control... and this is on the HN front page... I think some people are gonna have a bad day.

ThatGuy12310y ago

Woa! https://www.twitch.tv/worldofvnc

varjag10y ago

https://worldofvnc.net/browse.php?id=2113 judging by the tab names, some Russian botnet HQ.

illumin810y ago

Here's a really funny one:

https://worldofvnc.net/browse.php?id=440

I wonder whether anyone connected and upgraded him to Windows 10...

varjag10y ago

This is terrifying.

So many live systems, from CNC lathes through den feeders and boiler controllers to entire city water treatment facilities..

lisivka10y ago

wind-farm: https://worldofvnc.net/browse.php?id=2116

paulojreis10y ago

Now, that's an ode to the Internet of (Shitty) Things (https://twitter.com/internetofshit?lang=en).

trhway10y ago

i think it is obligatory to mention that Intel CPUs (which have vPro enabled, ie. Xeons and some others) have VNC server built-in on the chip.

j / k navigate · click thread line to collapse