Re: Hope conference talk on hacking the AS/400

I dont know about security in RPG but when programming in PHP security is
required for functional programs. One example would be forms and quotes...
''""''""" could do some damage if used the right way, even if by accident

----- Original Message ----- 
From: "Steve Martinson" <SMartinson@xxxxxxxxxxxxx>
To: <MIDRANGE-L@xxxxxxxxxxxx>
Sent: Friday, July 09, 2004 3:00 PM
Subject: Re: Hope conference talk on hacking the AS/400


It is probably with a fair amount of risk that I, as a security
practitioner in this programmer-heavy forum, say in response to Jeff's
post:

Programmers coding security-wise?  Isn't that an oxymoron?

> message: 5
> date: Wed, 9 Jul 2003 14:05:51 -0500
> from: "Jeffrey Lee" <jeff@xxxxxxxxxxx>
> subject: Re: Hope conference talk on hacking the AS/400
>
> I read a document the other day about a guy who "found" this
university owned as/400 and used the default passwords to  > get in. I
think that knowing what hackers do to break into a system and knowing
how yourself, will give you a head up   > when coding security wise.

Best regards,

Steven W. Martinson, CISSP, CISM
Manager of OutLink Security
Jack Henry & Associates, Inc.
7800 Willowchase Blvd.
Houston, TX.  77070
     voice 281.517.8000
     external fax 281.517.8157
     internal ext 471800




NOTICE: This electronic mail message and any files transmitted with it are
intended exclusively for the individual or entity to which it is addressed.
The message, together with any attachment, may contain confidential and/or
privileged information. Any unauthorized review, use, printing, saving,
copying, disclosure or distribution is strictly prohibited. If you have
received this message in error, please immediately advise the sender by
reply email and delete all copies.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.