Re: URGENT !! PTFs to fix another integrity problem

[MacWheel99@xxxxxxx]

>  From:    clewis@iquest.net (Chuck Lewis)
>  
>  I am not supposed to explain how (and I am NOT the one that figured it out.
> 
>  But I have done it and it IS scary...)
>  
>  The PTF's are to protect user id's and passwords; 'nough said ? :-)
>  
>  Chuck
>  
>  baceitun@arkwright-ri.com wrote:
>  
>  > What are these PTF's for?

Is this related to the thread not so long ago where the keystrokes of OS/400 
user sign on get into some QSYS work area unencrypted, then that work area is 
used by an operating system program in encrypted form at MI level to verify 
Ok for user security to continue, then after user signed on, IBM software 
neglected to clear the unencrypted work area, so that someone can interrogate 
work area & get a list of users & their actual passwords last used 
successfully by all work station addresses, a function which could be 
conducted by any hacker or BPCS PC user or person with command line authority 
& this IBM fix clears the work area after usage, only at sites that have 
installed the PTF.  That thread had a pointer to a 12 line RPG IV program 
someone posted that does the job of downloading this security info, and was 
conducted in MIDRANGE-L & MI400 & is probably still in the archives if you 
know what to search for.

Or is this some other problem that is being fixed?

Al Macintyre  ©¿©
MIS Manager Programmer & Computer Janitor of BPCS 405 CD Rel-02 running on 
AS/400 V4R3 http://www.cen-elec.com Central Industries of Indiana--->Quality 
manufacturer of wire harnesses and electrical sub-assemblies

Y2K is not the end of my universe, but a re-boot of that old Chinese curse.
The road to success is always under construction.
Accept that some days you are the pigeon and some days the statue.
Murphy's Mom brought wrong baby home from hospital so it should be Kelly's 
Law.
When in doubt, read the documentation, assuming you can find it.
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---