|
Steve You are correct. We had an incident in which the Chief Financial Officer of our company used PC Anywhere from home to office PC one weekend then Monday morning found that all the passwords on his PC had been wiped out. He wanted to know how that could happen. I was really surprised how seriously he was taking this, after all the arguements I had had with management over the years about them wanting to compromize security for one reason or another. I suspect he thinks the legal mumbo jumbo on his PC has some importance higher than the data base stuff on the 400. I said "Let me count the ways." Then I went on to speculate what was most probable & basically that the person who did it was a klutz. A really skilled breaker inner could get at the stuff on your PC & put the passwords back the way he found them & you would never be the wiser. > From: Steve.McKay@SouthTrust.com (Steve McKay) > > Jeffry wrote: > "PC anywhere has a password, your PC has a password and the AS/400 has a > password. > Plus someone has to know the dial-in phone number." > > Jeffry - > > I pose this scenario in all sincerity as a matter of my own curiousity - > > Suppose I'm a bad guy working part-time as the janitor at your company. One > night I'm cleaning up around your office and I hear your modem negotiating > a connection. As I stand there, I see you take control of your PC, open a > connection to the AS/400, sign-on and start doing "stuff". Being an > educated bad guy (whose probation terms say that I can't touch a computer - > that's why I'm your janitor), I realize that there are many files on this > AS/400 that I would like to have copies of or make changes to - and I've > got an "already signed-on" connection. > > Now the question - > > If I pull the phone cable out of the PC modem on your desk, can I take over > the "already signed-on" session and have my way with your AS/400?? > > (I don't know the answer but I would guess "yes"). > > Thanks, > > Steve MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.