DMPSYSOBJ, SETSPFP, etc.

["Steve Glanstein" <mic@xxxxxxxxx>]

Folks:

First of all, if you're running at security level 30 or below you're not
going to be protected. Period, that's it, period. You should have upgraded
years ago when Charlie Massoglia, Tom Liotta, Joe Park, Stan Smith, and
myself were yelling about these issues...Even IBM was onboard about
increasing qsecurity to 40 years ago...

I haven't checked the RPG and/or MI program at level 40 to see if it works.

The MI program fails at level 50. (Most of our RISC clients are at 50)

The DMPSYSOBJ command can be easily changed at this time to remove public
authority to it. It doesn't dump passwords for our APPC connections since we
use the RMTUSER and RMTPWD on STRPASTHR and bypass the signon screen.

With all of the screaming I thought I would wait and ask the simple
question, "Did anybody report this to IBM?" It's easy to take something like
this and keep it as a private tool for one's manhood (or womanhood). However
in my opinion, if IBM ever figures it out and gets a serious internet
presence with the AS/400 then we're really in for a ride...

Steve Glanstein
mic@aloha.com


+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---