RE: AS/400 on alt.hacker

In reality once a hacker is anywhere _inside_ your network you're pretty much
stuffed.  Anyone who can hook a sniffer up to your network can pretty much start
recording users and passwords then and there.  They _will_ control your network
very quickly.  The point I would make is that any external connection to the
world should, as a matter of course, be locked down damn tightly.  It also
raises an issue of physical security.  A scenario we considered is a hacker
walking into the building with a laptop and just patching into a port or in a
wireless office all they need is a Palm Pilot or the like.  It's an interesting
scenario.  Interesting but bloody scary.

James Turnbull


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---