• Subject: Re: DASD clearing, "Killing" an AS/400
  • From: John Earl <johnearl@xxxxxxxxxxxxxxxxxx>
  • Date: Fri, 03 Sep 1999 01:55:36 -0700
  • Organization: The PowerTech Group

Steve Glanstein wrote:

> My concern about security and hacking the AS/400 is no longer focussed on
> IBM nor on the publications in this list...It really is focussed on the
> sloppy software vendors who give the public *ALL authority to files,
> *ALLOBJ authority to a group profile, and/or sign on as security officer
> with default passwords, etc.

Hear Hear!!!

(Climbing onto my own soapbox)

The software vendors that you all know and love are really your worst security
nightmare.   I've got a session at COMMON and a blistering article sheduled for 
November edition of News/400 that takes software vendors to task for some of 
sloppy-assed practices.....   It's way past time they got their house in order.

IMHO, the AS/400 is a great e-business machine, but the way we secure our
applications make it too risky to ever put most of our current AS/400's on the
web.   That's gotta change, and the Third Party Application Vendors ought to 
the way for their customers.

(stepping down)


John Earl                                           johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com

| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com

This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].