Re: ssh X11Forward safety

["Douglas A. Tutty" <dtutty@porchlight.ca>]

On Tue, Jan 08, 2008 at 09:20:12PM -0800, Todd A. Jacobs wrote:
> On Tue, Jan 08, 2008 at 10:47:16AM -0500, Douglas A. Tutty wrote:
> 
> > security of my data and a need to use a browser with javascript and
> > sometimes flash; some sites only work with Iceweasel.
> 
> You're over-complicating this. You can use X without forwarding X11 by
> tunneling VNC or using nxclient. Both methods display the remote X11
> sessions without giving the remote system access to your local X server.
> 
> For SSH, just start vncserver with the -localhost flag, and forward port
> 59xx as follows:
> 
>     ssh -L5900:localhost:5900 vncserver.example.com
> 
> If you're using tightvnc (or the Debianizd vnc4 packages) you can do the
> same thing with the -via flag to vncviewer. Then just connect to
> localhost:0 with VNC, and voila!

Thanks.

I think I still need to get my data off the same box as that from which
I browse with javascript and flash.  Once that's done, I don't need use
X remotely anyway (at least not between a secure and unsecure box).  

Doug.