Re: instruction pointers

From: Larry Loen <lwloen@us.ibm.com>
> >  if you patch the program you can arrange to branch  to [whatever you
> wish]
>
> Well, sure.  > The question that matters in the long run, especially since
the original
> topic was Trojan Horses and Viruses is:  Can these things be propagated
> widely?
>
> Unlike other machines, with OS/400, you cannot ship the resulting patched
> program to another system and restore it or otherwise cause it to become a
> *PGM/*SRVPGM object on that machine

Larry, we have had this discussion before on this list.
What you say is what people and IBM would like to believe, but
it is plainly not true. Access to SST is not even required on
the "originating" system. All you need is to save the unpatched
program. Then download the save file to a PC. Do the patching
there. Fix the program validation value and the savefile checksums,
upload the save file to any other machine and restore it.

Please do not sing the party line. It is wrong. I grant you
the 'script kiddies' will have a hard time doing what I outlined
above, but that is just people that can are 'nice' to platform
for the sake of the platform.






+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---