Walden, Sounds like a keeper, to me... Thanks...! I would add processor serial number to the criteria to validate, at least amongst 400s and other platforms that support this. (Intel could have, but was required by the user community to allow this feature to be disabled at the user's option.) But I'd like to take this to the next level... (Again, don't know the technology.) I'd like to know more about the issues surrounding "Can it be defeated, of course..."... I think a part of the answer to this is collaboration amongst trusted users... Don't know any specifics, but it would seem that different methods of security should be rotated, and continually evolved, to give the hackers a moving target. Spread the security methods around, along the lines that the DNS addresses are spread through the Net (although at a MUCH quicker rate). My question is whether it's possible (theoretically AND practically) to keep the security methods evolving fast enough to **simulate** staying one step ahead of the hackers...?!? (You'll always have a small minority of crooked insiders, so you can only "simulate" staying ahead of the hackers, AFAIK.) j "outta here for now!" t | -----Original Message----- | From: email@example.com | [mailto:firstname.lastname@example.org]On Behalf Of Walden H. Leverich | Sent: Sunday, December 16, 2001 2:01 PM | To: 'email@example.com' | Subject: RE: QUSER on ODBC requests | | | OK, so have the pc program ask the as/400 for a valid userid and password. | The 400 could validate that the request was valid (remote ip, MAC, time, | etc.) and return a user and password. A 5 second counter would then start | and when it expires the password for that user would be changed. Can it be | defeated, of course, but you'd have to set your ip, mac address | and ask for | the password at the specific date and time that's much more secure than a | user called 'transfer' with a password of 'transfer'. | | -Walden | | | ------------ | Walden H Leverich III | President | Tech Software | (516)627-3800 x11 | WaldenL@TechSoftInc.com | http://www.TechSoftInc.com | | | | -----Original Message----- | From: jt [mailto:firstname.lastname@example.org] | Sent: Friday, December 14, 2001 14:19 | To: email@example.com | Subject: RE: QUSER on ODBC requests | | | Rob, | | I'd sure like to see an acceptable solution to this one, myself... | | Hardcode passwords in code..: no good at all...! But have | password keyed in | on every batch FTP and Domino app use...: AIN'T GONNA HAPPEN...! | <huge snip of prior messages>
As an Amazon Associate we earn from qualifying purchases.
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.