Re[2]: Security: interesting reading.

If you are this concerned about password security then maybe you should
investigate other identification methods - such as two factor authentication
which cycles every 60 seconds.


Martin
CCT
========================================

From:
To: MS Outlook::MIDRANGE-L@midrange.com

Subject: Re: Security: interesting reading.
Date: 11/5/99 12:14 AM

It looks like that article describes exactly what happened on this list last
month where one of our subscribers posted their encrypted PW and it was
decrypted by leif@ibm.net

Leif said he could compromise the password database, but never proved it.
Personally I feel that the database is safe, but my main concern would be
hackers sniffing the wire for a security officer logon, then decrypting the
password. Kinda like L0phtcrack for the 400...

Bill
Sorrento


-----Original Message-----
From: Don <dr2@cssas400.com>
To: midrange-l@midrange.com <midrange-l@midrange.com>
Date: Thursday, November 04, 1999 10:37 PM
Subject: Security: interesting reading.


>
>You may want to checkout the following article:
>http://www.news400.com/as400security/19991021.html
>
>I would be interested if anyone has any further info on this.  Private
>email may be best...:)
>
>Tks
>
>Don in DC


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---