RE: No single case of hacking... -- MI400

Title: RE: No single case of hacking...

Joe,

for us who aren't as network/internet/security savvy, can you share with us, what type of settings you used, and why, to lock down your 400?...

we currently don't have our 400 connected to the internet, but I would find the knowledge useful, just incase we do decide to open one of our box's up to the world..

thanks, tim

this may be a little off topic for MI, but I would still be interest either in another list or privately...

-----Original Message-----
From:   Joe Pluta [SMTP:joepluta@PlutaBrothers.com]
Sent:   Thursday, June 07, 2001 8:16 AM
To:     MI400@midrange.com
Subject:        RE: No single case of hacking...

No, not everyone has done so. Those who have not, yet have chosen to make
their systems accessible through the Internet, are silly people. Then
again, most hacking is done from the inside, as Leif suggests, so anybody
who has enabled ODBC access to their AS/400 is just as silly. Finally, as
has been shown to me, any programmer worth his salt can access any object on
the machine at any time. All the more reason to severely limit the access
to your machine. Security is a mindset, not just an application of a few
patches.

Joe

P.S. Yeah, the AS/400 may get nailed. But it won't be my AS/400, nor that
of anyone who follows my security advice.

> -----Original Message-----
> From: owner-mi400@midrange.com [mailto:owner-mi400@midrange.com]On
> Behalf Of Bob Crothers
> Sent: Thursday, June 07, 2001 9:19 AM
> To: MI400@midrange.com
> Subject: RE: No single case of hacking...
>
>
> Joe,
>
> I have no doubt that you can make your AS/400 secure. But does that
> mean everybody has done so? I still remember when AS/400's where
> shipped with security level 10 (and it wasn't that long ago).
>
> And I know "consultants" who think of trucks when you say backup. And
> a lot of companies trust these "consultants" for all of their IT
> knowledge. Note: most consultants are good. But a few are very very
> scary.
>
> It is only a matter of time. The /400 will get nailed.

+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---