Re: AS400 user password

Kurt,

> I can't help but think that we (the list) has done a bad thing here.

Yes probably bad form in the sense that IBM wasn't given a chance to fix it
before it was made public.

In the fact of making it public, probably not - the more voices IBM hears in
regard to security holes the better. I can search the Internet for hundreds
of publicly posted exploits for Unix, Win9x/NT and even my favourite BeOS.

> Messages of that nature should be forwarded to the security folks @ IBM.

Do you know of the IBM AS/400 Security alert email address ? If so post it
here !

--phil


+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---