Re: [MI400] How does this software work??

["Leif Svalgaard" <leif@xxxxxxxx>]

From: Bale, Dan <Dan.Bale@handleman.com>
> <tired of waiting for someone else to ask the obvious question ;-)>
> So, just how difficult is it to write a program like this?  On the
> surface, it would appear to be fairly simple, if you know where the 5250
> flag is and how to change it.  Maybe another chapter for your e-book,
> Leif?
===> If one knows how to everything is easy :-)
About the chapter: look for it down the road.
>
> Also, I noted that from their website that this runs only at V4R3 or
> higher.  Is this 5250 flag new to that release?
===> don't know.
I do know that in going from V4R2 to V4R3 IBM committed a
serious security blunder (still with us). The FAST400 program
exploits that.

>
> Dan Bale
> IT - AS/400
> Handleman Company
> 248-362-4400  Ext. 4952
> D.Bale@Handleman.com
>
> > -----Original Message-----
> > From: Leif Svalgaard [SMTP:leif@leif.org]
> > Sent: Wednesday, October 17, 2001 7:57 AM
> > To: mi400@midrange.com
> > Subject: Re: [MI400] How does this software work??
> >
> > From: Bale, Dan <Dan.Bale@handleman.com>
> > > Leif?  Can you reverse engineer this thing to see what its doing?
> >
> > OK, here goes:
> > 1) the program is a user state program
> > 2) it does not  use or modify the SEPT as a Trojan would often do
> > 3) it works by removing the 5250 "flag" from a job and does no harm
> >
> _______________________________________________
> This is the MI Programming on the AS400 / iSeries (MI400) mailing list
> To post a message email: MI400@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/mi400
> or email: MI400-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/mi400.
>