Re: AMAPICS user profile password

Eric,

DITTO!

I have engage two accounts this month that use the default AND have their
systems open to the world.

Years ago before IBM changed the operating system to require a unique
password, about 50% of the systems I found had not changed the QSECOFR
password.

I remember being asked by a CEO what their risk of an attack were if they
began selling over the internet. My response: 100%. He was shocked and
asked why, I told him because they had no security policies and procedures
anywhere in the company.

Today, when I walk into an account I ask to see their policies and
procedures for security (among others). I'd estimate that 75% still do not
have any policies and procedures. It's a crime just waiting to happen.

Kevin

-----Original Message-----
From: mapics-l-bounces@xxxxxxxxxxxx [mailto:mapics-l-bounces@xxxxxxxxxxxx]
On Behalf Of Eric Wolf
Sent: Friday, June 13, 2008 8:52 AM
To: mapics
Subject: [MAPICS-L] AMAPICS user profile password

Just a question-
How many of you have never changed the AMAPICS user profile password? How
many of you have either COM_Net or EAX or some other web front that prompts
you for an "AS400/i-Series/Series-i/Power-i" user id and password?

It is amazing to me how many accounts that I have been in where this
password has never been changed...

Just some thoughts...
Eric
_______________________________________________
This is the MAPICS ERP System Discussion (MAPICS-L) mailing list
To post a message email: MAPICS-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/mapics-l
or email: MAPICS-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/mapics-l.