RE: Telephone Company warning! -- JAVA400-L

It's been hacked.  Used to be a guy at COMMON who presented the security
workshop that would demo it in about 5 minutes.  A lot depends on the
security settings, and how well the system is administered.  Never heard of
a virus though.  I'm sure that there are people who could do it.... they
just aren't the type to brag about it and post it on the web for the script
kiddies to have fun with.  Windows is too easy... why go after the though
stuff?  Not much glory in defacing the logon screen of a 5250...

Nick



                    "Michael Wills"
                    <walkergagh@hotmai        To:     java400-l@midrange.com
                    l.com>                    cc:
                    Sent by:                  Subject:     RE: Telephone 
Company warning!
                    java400-l-admin@mi
                    drange.com


                    12/03/01 04:26 PM
                    Please respond to
                    java400-l






The only reason that they may be able to make that claim is becuase OS/400
is not able to be gotten for free or for the PC platform, so hackers don't
have an opportunity to learn about it to hack it.


----------------------------
Mike Wills
AS400 Programmer
walkergagh@hotmail.com



----Original Message Follows----
From: "Booth Martin" <booth@MartinVT.com>
Reply-To: java400-l@midrange.com
To: <java400-l@midrange.com>
Subject: RE: Telephone Company warning!
Date: Mon, 3 Dec 2001 16:16:27 -0500 (Eastern Standard Time)

Never been hacked?  I'd heard "no known viruses in the wild" but never
heard
a claim that the machine is unhackable.

--------------------------------------------
Booth Martin
MartinB@Goddard.edu
802-454-8315 x235
--------------------------------------------
-------Original Message-------
From: java400-l@midrange.com
Date: Monday, December 03, 2001 03:28:36 PM
To: 'java400-l@midrange.com'
Subject: RE: Telephone Company warning!
hmmmmm... be nice to know how he did... It would be interesting to see if
IBM's claim that the AS/400 has never been hacked stands up...
dan
-----Original Message-----
From: Mike Silvers [mailto:msilvers@hbs-inc.com]
Sent: Monday, December 03, 2001 3:00 PM
To: Ignite400 List
Cc: RPG400-L; Midrange-L; Java400L List
Subject: Telephone Company warning!
All:
I realize that this is a bit off topic, but I wanted to reach as many
AS/400
people as possible....
I was approached by a hacker using Yahoo messenger inquiring about teaching
him everything I could about the workings of an AS/400. He told me that he
was breaking into a telephone company AS/400. He told me that he is using a
dial in connection and he was at the AS/400 and he wanted to sign on.
If there is anyone from a phone company on the lists, you may want to check
for unauthorized users on your system.
He did not tell me (and he might not know) if he was dialing into a network
or directly to the AS/400 (using PPP).
Mike
Mike Silvers
AS/400 Senior Programmer/Analyst
AS/400 IBM Certified RPG IV Developer
AS/400 IBM Certified Solutions Expert
Hainey Business Systems
8 E. Canal St
Dover, PA 17315
Branch Office: (410) 397-8739
Phone: (800) 932-3380
Fax: (717) 292-9474
Web: http://www.hbs-inc.com
________________________________
Providing E-Commerce, EDI, AS/400
Development and related services
nationwide.
_______________________________________________
_______________________________________________
This is the Java Programming on and around the iSeries / AS400 (JAVA400-L)
mailing list
To post a message email: JAVA400-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/java400-l
or email: JAVA400-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.



_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

_______________________________________________
This is the Java Programming on and around the iSeries / AS400 (JAVA400-L)
mailing list
To post a message email: JAVA400-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/java400-l
or email: JAVA400-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.