If you don't have a VPN, a ssh tunnel is probably the easiest way to connect sanely. Do not use VNC over untrusted networks; plaintext authentication, to say nothing of data.