RE: No single case of hacking...

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

No, not everyone has done so.  Those who have not, yet have chosen to make
their systems accessible through the Internet, are silly people.  Then
again, most hacking is done from the inside, as Leif suggests, so anybody
who has enabled ODBC access to their AS/400 is just as silly.  Finally, as
has been shown to me, any programmer worth his salt can access any object on
the machine at any time.  All the more reason to severely limit the access
to your machine.  Security is a mindset, not just an application of a few
patches.

Joe

P.S. Yeah, the AS/400 may get nailed.  But it won't be my AS/400, nor that
of anyone who follows my security advice.


> -----Original Message-----
> From: owner-mi400@midrange.com [mailto:owner-mi400@midrange.com]On
> Behalf Of Bob Crothers
> Sent: Thursday, June 07, 2001 9:19 AM
> To: MI400@midrange.com
> Subject: RE: No single case of hacking...
>
>
> Joe,
>
> I have no doubt that you can make your AS/400 secure.  But does that
> mean everybody has done so?  I still remember when AS/400's where
> shipped with security level 10 (and it wasn't that long ago).
>
> And I know "consultants" who think of trucks when you say backup.  And
> a lot of companies trust these "consultants" for all of their IT
> knowledge. Note: most consultants are good.  But a few are very very
> scary.
>
> It is only a matter of time.  The /400 will get nailed.

+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---