Re: iSeries vs. Unix vs. SQL Server vs. Oracle &Security/Data separation???

Well, that is why you have other security pieces on the computer besides
running a firewall.  Like Tripwire is a good one for Linux, among others.
The segmented Web piece is better security, but it still doesn't mean you
don't have to keep an eye on it.
----- Original Message ----- 
From: "Scott Klement" <klemscot@xxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Wednesday, August 06, 2003 6:59 PM
Subject: RE: iSeries vs. Unix vs. SQL Server vs. Oracle &Security/Data sep
aration???


> If they have full control of the box, they can add it to any workgroup
> or domain that they like -- as long as it's accessible to this machine.
>
> I'd be more worried about them sneaking a program into the system that
> records things going to your web site, like credit card numbers,
> passwords, e-mail addresses, etc, and then sends them back (perhaps via
> anonymous USENET access, or some other untraceable fashion) to the
> original hacker.
>
> If you didn't know that they installed this program, they could be
> leeching this information for a long time before anyone notices, and by
> then they've got a lot of customers info, ready to use for whatever
> purposes they deem fit.
>
> Once things have been discovered, the potential lawsuits and bad press
> could destroy you.
>
> > Only runs IIS and one sock client application that takes request from
> > IIS and re-formats them to the iSeries.  The socket client also connects
> > to one of several iSeries, if the primary is down, it switches to a
> > secondary.  We just reset once the primary is back up.
>
> But, if they have "full control" of the box, they can install any software
> that they want to, they're not limited by the client apps you've placed on
> it.
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>