RE: iSeries Security in Computerworld

Wayne, Don and Rob,

I think your examples underscore what we see in the marketplace.  Some
people assert they are secure just because they run OS/400.  Then they
do things that make their box horribly un-secure and believe that
because they run OS/400 they are somehow immune to security risks.

There has been a lot of fury in the security space about having to
comply with regulations like SOx, HIPPA, PCI, etc. and I think this is
good.  For all the system admins who are asserting that they are already
secure, what these governmental and industry regulations are saying is
"Oh yeah?  Now prove it."

And that's the difference.  You can't just "think" you are secure, you
have to be able to demonstrate it to auditors and regulators.

jte

--
John Earl | Chief Technology Officer
The PowerTech Group
19426 68th Ave. S
Seattle, WA 98032
(253) 872-7788 ext. 302
john.earl@xxxxxxxxxxxxx
www.powertech.com 
Celebrating our 10th Anniversary Year!
 
 
 
 
This email message and any attachments are intended only for the use of
the intended recipients and may contain information that is privileged
and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message, or by telephone, and delete
the message from your email system.
--

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Friday, November 03, 2006 1:40 PM
To: Midrange Systems Technical Discussion
Subject: RE: iSeries Security in Computerworld

I know of a CE that says he has a customer that has 5250
telnet open to
his system using that user id and password.  Allows the CE
to use it
remotely.

Rob Berendt
--
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"Chuck Lewis" <chuck.lewis@xxxxxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
11/03/2006 04:13 PM
Please respond to
Midrange Systems Technical Discussion <midrange-
l@xxxxxxxxxxxx>


To
"'Midrange Systems Technical Discussion'" <midrange-
l@xxxxxxxxxxxx>
cc

Subject
RE: iSeries Security in Computerworld






WOW - that is absolutely mind boggling Wayne. Bet you
shook them up real
good !

Chuck

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Wayne McAlpine
Sent: Friday, November 03, 2006 3:54 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: iSeries Security in Computerworld

I remember being able to log on remotely to another state
agency's
system as QSECOFR QSECOFR not too many years ago.  They
thought they
could achieve security through obscurity until I pointed
out how
vulnerable they were.


--
This is the Midrange Systems Technical Discussion
(MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the
archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion
(MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the
archives
at http://archive.midrange.com/midrange-l.