Re: Rewarding Challenge AS/400

exactly my point. We have told IBM  four months ago about this flaw
and there was no scramble to fix it within 24 hours. In fact the
reply we got from IBM was : "we'll ride out the storm". But did they
tell their customers? no! so who is irresponsible?
----- Original Message -----
From: Jim Langston <jlangston@conexfreight.com>
To: <MIDRANGE-L@midrange.com>
Sent: Monday, September 27, 1999 9:31 AM
Subject: Re: Rewarding Challenge AS/400


> Okay, what about the messages we get on the net about the security
> holes in Outlook?  Internet Explorer?  Netscape?
>
> These holes exist, and need to be plugged, and you will notice that when
> one of these holes is found and exposed, there is a scramble by Microsoft
> or Netscape to close them as quickly as possible.  I have seen some holes
> closed within a matter of 24 hours.
>
> If there is a security risk on the AS/400, I want to know what it is, and
how
> to do it.  Not so I can do it, but so that I can do something about it!
Knowing
> that there is a security hole in the passwords it makes me aware of how
> critical it is to keep my user profiles away from prying eyes.
>
> The crackers already know.  There are so many password crackers out on
> the net it is not funny.  I think it is a very good idea for us to know the
same
> information as the people who are trying to get into our systems.
>
> In this case, I do not believe that ignorance is bliss.
>
> Regards,
>
> Jim Langston
>
> Colin Williams wrote:
>
> > Haven't you just told everyone how to decrypt as400 passwords?
> >
> > If so, isnt that very irresponsible?
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---