Re: AS400 user password

I speculate that 

1. Many Hackers now know how to get past the AS/400 security of sites that 
have not yet installed this PTF

2. Many AS/400 sites do not have people subscribing to this kind of info ... 
I have been on tenderhooks whether or not to even participate in MIDRANGE-L 
because of the volume of the traffic in stuff of less relevance to me.

3. There is a responsibility for IBM to notify all AS/400 customers in an 
unambiguous manner about the seriousness of this ... not the usual vague PTF 
documentation buried in roar of other announcements.  I subscribe to several 
general IBM information services & have not yet noticed them saying anything 
about this.

4. News/400 & Midrange Computing & other AS/400 journals outside of IBM will 
mention this in their next dead tree editions, lead times on publication 
permitting. ... I get several e-bulletins from such places & have not yet 
seen a reference   I expect that what they should say is enough to identify 
the hole in IBM security exists & what PTFs to order to plug it, without 
giving out any more info to help hackers, because there are companies using 
AS/400 without any staff subscribing to any such publications.

5.  I have forwarded a few posts in this thread to my IBM support contacts, 
trusting that they would check it out, then warn other customers.

Al Macintyre  ©¿©
http://www.cen-elec.com MIS Manager Programmer & Computer Janitor
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---