RE: Where are all of the /400's going. (was RE: QUSER on ODBC requests)

["jt" <jt@xxxxxx>]

Walden,

Sounds like a keeper, to me...  Thanks...!

I would add processor serial number to the criteria to validate, at least
amongst 400s and other platforms that support this.  (Intel could have, but
was required by the user community to allow this feature to be disabled at
the user's option.)


But I'd like to take this to the next level...  (Again, don't know the
technology.)  I'd like to know more about the issues surrounding "Can it be
defeated, of course..."...

I think a part of the answer to this is collaboration amongst trusted
users...  Don't know any specifics, but it would seem that different methods
of security should be rotated, and continually evolved, to give the hackers
a moving target.  Spread the security methods around, along the lines that
the DNS addresses are spread through the Net (although at a MUCH quicker
rate).


My question is whether it's possible (theoretically AND practically) to keep
the security methods evolving fast enough to **simulate** staying one step
ahead of the hackers...?!?  (You'll always have a small minority of crooked
insiders, so you can only "simulate" staying ahead of the hackers, AFAIK.)


j "outta here for now!" t



| -----Original Message-----
| From: midrange-l-admin@midrange.com
| [mailto:midrange-l-admin@midrange.com]On Behalf Of Walden H. Leverich
| Sent: Sunday, December 16, 2001 2:01 PM
| To: 'midrange-l@midrange.com'
| Subject: RE: QUSER on ODBC requests
|
|
| OK, so have the pc program ask the as/400 for a valid userid and password.
| The 400 could validate that the request was valid (remote ip, MAC, time,
| etc.) and return a user and password. A 5 second counter would then start
| and when it expires the password for that user would be changed. Can it be
| defeated, of course, but you'd have to set your ip, mac address
| and ask for
| the password at the specific date and time that's much more secure than a
| user called 'transfer' with a password of 'transfer'.
|
| -Walden
|
|
| ------------
| Walden H Leverich III
| President
| Tech Software
| (516)627-3800 x11
| WaldenL@TechSoftInc.com
| http://www.TechSoftInc.com
|
|
|
| -----Original Message-----
| From: jt [mailto:jt@ee.net]
| Sent: Friday, December 14, 2001 14:19
| To: midrange-l@midrange.com
| Subject: RE: QUSER on ODBC requests
|
|
| Rob,
|
| I'd sure like to see an acceptable solution to this one, myself...
|
| Hardcode passwords in code..: no good at all...!  But have
| password keyed in
| on every batch FTP and Domino app use...:  AIN'T GONNA HAPPEN...!
|

<huge snip of prior messages>