nvda remote is still dangerous

Sociopath is back. And vorried about this world. You know what i just had to discover? I playd arround with nvda remote and just had the idea to connect to key 1234. How could i have the idea that some people would actually be connected to this key? Yeah, it was. I sometimes do thjis, and when i find such stupid keys, i always try to make them disconnect. How ever, mostly it is hard to be successful.

This is mostly because people don’t realize what is going on. For this particular person i have first tried to disconnect him via the nvda menu. The problem was i could not figure out the nvda remote submenu. It was neither english nor german. I took a guess, but all i did was opening a settings menu. I then tried to open notepad and send this guy a message. It failed through clipboard. But it did not work. I think i managed to open notepad, but before i could paste, the person closed the window. I then succeded though by shutting down his computer. He booted it up again probably, but the connection did not return. At this point i am frustrated mainly about 2 things. First, why didn’t the guy disconnect himself? He closed his window, so he noticed me. Why didn’t he disconnect? At the second hand, i am frustrated about nvda developers, since they refuse to take action to stop this. If you would enter 1234, 1 or 0000 as a key, they would throw you back out. Nvda remote just connects without even warning the user. Please warn your friends about this, especially the ones that are less competend with computers. If you, the user we shut down, reads this, please do the same and don’t do that ever again.

Published

By simter

A wise man named ironcross32 once said that i was a dangerous person.

67 comments

  1. I’m not paranoyed, but if a program has a bad reputation, or no reputation at all, people don’t know what kind of shady things it does.

  2. Just run NVDA from source then?

    It’s not something I’m stressing over, but I prefer it whenever possible.

  3. This argument is atleast reasonable, but not exactly.
    It is possible to upload one thing to GH and compile another one.
    You can use Wireshark to see what Zhengdu or JAWS is doing. Dont be paranoid please.

  4. @Nuno: To be completely fair, one of the reasons I don’t use ZDSR is because it’s not open sourced. Same reason I don’t use JAWS, unless I *have* to. You don’t know what that software’s doing. You think NVDA’s up to something? Go look through the code. This is why I like open source whenever possible.

  5. If you are helping a newbie, the first thing you tell them is to set a strong password, or you will most likely be the one who sets the password, not the newbie. It’s absolutely the user’s fault if they use such passwords, debate over. Yeah, I also saw many people going on NVDA remote just to have fun, sadly.

  6. You’re so funny in your statements about open source, you don’t even know what th source code is so what this open source thing helps you in?

  7. I was joking with my second comment, and you should fuck yourself Urh.
    Now to the point of the joke: I said "Don’t use NVA" becauseyou can say that about every function of the software which handles the system APi somehow: Don’t start NVA on auto login, don’t load plugins on auto login because X Y and Z. And if somebody has no brain then its their fault and NVDA remote developers should not be blamed for it.
    Urh should be banned from the world.

  8. People who think logically won’t do that. Now if say the nvdaremote.com server got hacked, we could talk about safety concerns, although the addon itself is fine, you can use another server which you trust. But weak passwords? Nay. That’s the users’ deliberate choice. If you leave your house without locking the door, someone might come and rob you. There’s no disclaimer on your door warning you about this. Don’t be one of those crying, feel free to warn your friends if you think you have to but blaming NVDA Remote makes no sense. Seriously.

  9. And when someone gets wrecked by using such a key people will cry about how unsafe nvda remote is. Wow.

  10. But it should be their interest to learn to be more careful. You have no rights to force people to set a different password. You don’t even know the situation, maybe someone really is a computer newbie and someone else is helping them. I don’t think it’s the case most of the time but you can never know. Many people do this for fun to see who connects, it sounds silly to me but it’s their choice. Many people also prefer a quick weak password, maybe not 1234 but simply a short word or something not complex. Let them have it and don’t worry too much. Chill.

  11. I expect them to adleast put up some kind of warning not to do that or just completely frbid it. But i just had this idea to make a pullrequest on github with a change in the client which allowes this, let’s see what happens. A good example of warning would be like in wp when you set it up with a week password you have to check a checkbox named confirm the use of week password.

  12. @guest, this is not a topic, neither a forum. It’s a blog entry and it is up to the blogger himself to handle the comments. If this was a forum, most of the threads would hopefully be removed by now.

  13. I have nothing against ZDSR personally, it’s just not for me. Don’t come into other threads and say, use X because Y, though. You’ve made your opinion very bloody clear, now please shut up and let the people who actually know about the topic handle it, please.

  14. yeah and he’s using some chinese bullshit that’s not even opensourced and doesn’t even have half the features that nvda has, and not even is it free.

  15. What do you expect the developers to do? I mean sure, they shouldn’t have been using that key, but like…

    @Nuno: Thanks for derailing a topic that didn’t need derailed, just because you don’t like NVDA.

  16. Lol it’s not about using NVDA but being stupid. I’m laughing really hardly now. You know, there’s a pretty nice button which if you turn on, remote connects automaticaly. If you don’t, it doesn’t. That’s like Einstein level I know, but hey. Who told you to connect to 1234 anyway? If someone is so stupid to use such codes, chame is on them. They shouldn’t be so stupid to think that their key is too easy.

  17. Dude nvda remote was never made for that purpose. Nvda remote was made for fast I know what I’m doing. I’m at risk otherwise connections. Don’t be angry. Your not the one whose connected or controllable. If someone doesn’t honor the security risk of staying connected to a simple key, then that’s on them.

Leave a comment

Your email address will not be published. Required fields are marked *

EltenLink