RE: No single case of hacking...

["Bob Crothers" <bob@xxxxxxxxxxxxxx>]

Joe,

I agree with everything you are saying!  It is not yours or your
customer's machines that are at risk.  But there are a lot of silly
people in the world...that is my only point.

Bob

-----Original Message-----
From: owner-mi400@midrange.com [mailto:owner-mi400@midrange.com]On
Behalf Of Joe Pluta
Sent: Thursday, June 07, 2001 10:16 AM
To: MI400@midrange.com
Subject: RE: No single case of hacking...

No, not everyone has done so.  Those who have not, yet have chosen to
make
their systems accessible through the Internet, are silly people.  Then
again, most hacking is done from the inside, as Leif suggests, so
anybody
who has enabled ODBC access to their AS/400 is just as silly.  Finally,
as
has been shown to me, any programmer worth his salt can access any
object on
the machine at any time.  All the more reason to severely limit the
access
to your machine.  Security is a mindset, not just an application of a
few
patches.

Joe

P.S. Yeah, the AS/400 may get nailed.  But it won't be my AS/400, nor
that
of anyone who follows my security advice.


> -----Original Message-----
> From: owner-mi400@midrange.com [mailto:owner-mi400@midrange.com]On
> Behalf Of Bob Crothers
> Sent: Thursday, June 07, 2001 9:19 AM
> To: MI400@midrange.com
> Subject: RE: No single case of hacking...
>
>
> Joe,
>
> I have no doubt that you can make your AS/400 secure.  But does that
> mean everybody has done so?  I still remember when AS/400's where
> shipped with security level 10 (and it wasn't that long ago).
>
> And I know "consultants" who think of trucks when you say backup.
And
> a lot of companies trust these "consultants" for all of their IT
> knowledge. Note: most consultants are good.  But a few are very very
> scary.
>
> It is only a matter of time.  The /400 will get nailed.

+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
dr2@cssas400.com
+---

+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---