Re: how to have AS/400 console at home

Steve

You are correct.

We had an incident in which the Chief Financial Officer of our company used
PC Anywhere from home to office PC one weekend then Monday morning found that
all the passwords on his PC had been wiped out.
He wanted to know how that could happen.

I was really surprised how seriously he was taking this, after all the
arguements I had had with management over the years about them wanting to
compromize security for one reason or another.  I suspect he thinks the legal
mumbo jumbo on his PC has some importance higher than the data base stuff on
the 400.

I said "Let me count the ways."
Then I went on to speculate what was most probable & basically that the
person who did it was a klutz.  A really skilled breaker inner could get at
the stuff on your PC & put the passwords back the way he found them & you
would never be the wiser.

> From: Steve.McKay@SouthTrust.com (Steve McKay)
>
>  Jeffry wrote:
>  "PC anywhere has a password, your PC has a password and the AS/400 has a
>  password.
>  Plus someone has to know the dial-in phone number."
>
>  Jeffry -
>
>  I pose this scenario in all sincerity as a matter of my own curiousity -
>
>  Suppose I'm a bad guy working part-time as the janitor at your company. One
>  night I'm cleaning up around your office and I hear your modem negotiating
>  a connection.  As I stand there, I see you take control of your PC, open a
>  connection to the AS/400, sign-on and start doing "stuff".  Being an
>  educated bad guy (whose probation terms say that I can't touch a computer -
>  that's why I'm your janitor), I realize that there are many files on this
>  AS/400 that I would like to have copies of or make changes to  - and I've
>  got an "already signed-on" connection.
>
>  Now the question -
>
>  If I pull the phone cable out of the PC modem on your desk, can I take over
>  the "already signed-on" session and have my way with your AS/400??
>
>  (I don't know the answer but I would guess "yes").
>
>  Thanks,
>
>  Steve

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)