Re: "Hackers Quarterly" does the AS/400 -- MIDRANGE-L



I shared this info with Costco IS.







"V. Leveque" <vleveque@earthlink.net> on 07/02/99 11:09:02 AM

Please respond to MIDRANGE-L@midrange.com
                                                                                
                                                                                
                                                                                


                                                              
                                                              
                                                              
 To:      MIDRANGE-L@midrange.com                             
                                                              
 cc:      (bcc: Danny Jahr/Lawson)                            
                                                              
                                                              
                                                              
 Subject: Re: "Hackers Quarterly" does the AS/400             
                                                              







Actually not much useful.  Just a primer.  FYI, the one thing suggested was
social engineering to get one of those "all powerful" QSYSOPR passwords.
The hacker is supposed to try several times to log in as QSYSOPR.  When the
account is disabled, you call the help desk and pretentd to be an actual
operator and try to get a new password.

The article on hacking COSTCO was a description of menu items for their POS
system and how to abuse them.  If anyone on this list is with COSTCO, they
may want to watch their systems a little more closely.




At 09:15 AM 7/1/99 -0400, you wrote:
>But were the articles helpful to a mischief maker?  Was there any
>information not publicly available and easily found?
>
>In <2.2.32.19990701033806.00afd490@earthlink.net>, on 06/30/99
>   at 08:38 PM, "V. Leveque" <vleveque@earthlink.net> said:
>
>>For all you concerned about security:
>
>>The magazine 2600 "The Hacker Quarterly" has 2 articles on AS/400
>>hacking. One is an overview, the other gets into the details of COSTCO's
>>retail system.  Fortunately the first article is very basic and even
>>wrong in a few points (QSYSOPR is NOT "root")  Unfortunately, both these
>>articles will inspire more mischief.
>
>--
>-----------------------------------------------------------
>boothm@ibm.net
>Booth Martin
>-----------------------------------------------------------
>
>+---
>| This is the Midrange System Mailing List!
>| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
>| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator: david@midrange.com
>+---
>
>

     |----------------------------|  "Outside of a dog, a book is a man's
     |\  /         |    \  /      |  best companion.  Inside of a dog,
     | \/ INCENT   |__E  \/EQUE   |  it's too dark to read."
     |----------------------------|        -- Groucho Marx

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---