Re: URGENT !! PTFs to fix another integrity problem

[Chuck Lewis <clewis@xxxxxxxxxx>]

Other...

MacWheel99@aol.com wrote:

> >  From:    clewis@iquest.net (Chuck Lewis)
> >
> >  I am not supposed to explain how (and I am NOT the one that figured it out.
> >
> >  But I have done it and it IS scary...)
> >
> >  The PTF's are to protect user id's and passwords; 'nough said ? :-)
> >
> >  Chuck
> >
> >  baceitun@arkwright-ri.com wrote:
> >
> >  > What are these PTF's for?
>
> Is this related to the thread not so long ago where the keystrokes of OS/400
> user sign on get into some QSYS work area unencrypted, then that work area is
> used by an operating system program in encrypted form at MI level to verify
> Ok for user security to continue, then after user signed on, IBM software
> neglected to clear the unencrypted work area, so that someone can interrogate
> work area & get a list of users & their actual passwords last used
> successfully by all work station addresses, a function which could be
> conducted by any hacker or BPCS PC user or person with command line authority
> & this IBM fix clears the work area after usage, only at sites that have
> installed the PTF.  That thread had a pointer to a 12 line RPG IV program
> someone posted that does the job of downloading this security info, and was
> conducted in MIDRANGE-L & MI400 & is probably still in the archives if you
> know what to search for.
>
> Or is this some other problem that is being fixed?
>
> Al Macintyre  ©¿©
> MIS Manager Programmer & Computer Janitor of BPCS 405 CD Rel-02 running on
> AS/400 V4R3 http://www.cen-elec.com Central Industries of Indiana--->Quality
> manufacturer of wire harnesses and electrical sub-assemblies
>
> Y2K is not the end of my universe, but a re-boot of that old Chinese curse.
> The road to success is always under construction.
> Accept that some days you are the pigeon and some days the statue.
> Murphy's Mom brought wrong baby home from hospital so it should be Kelly's
> Law.
> When in doubt, read the documentation, assuming you can find it.
> +---
> | This is the BPCS Users Mailing List!
> | To submit a new message, send your mail to BPCS-L@midrange.com.
> | To subscribe to this list send email to BPCS-L-SUB@midrange.com.
> | To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner: dasmussen@aol.com
> +---

+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---