

If "VNC viewers may control computer with password. To see if someone could be spying on you with VNC server, go to the Remote Management section in Sharing and then click on Computer Settings. The chances of someone spying on you with ARD is very, very low. To address your concerns about being hacked or spied on, though, I think I should mention that Remote Management deals only with Apple Remote Desktop and the VNC Server. That should indicate when the VNC Server has been initialized.

System/Library/CoreServices/RemoteManagement/AppleVNCServer.bundle/Contents/Support/writesettings You might also want to look for the following path in your system.log file: 4:34:44.154 PM screensharingd: Authentication: SUCCEEDED :: User Name: user_account :: Viewer Address: ip_address :: Type: DH Screensharingd messages notify you of what IP is trying to log in as well as the user account that it's trying to use. You will find messages related to the process "screensharingd" in the system.log file.
