RE: Why NOT the web?

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: rob@xxxxxxxxx
> 
> And, again, you don't see that about IBM bugs because they practice
> security by obscurity.  If you search the ptf cover letters for
Integrity
> problem it will not tell you that if you don't put this on someone can
> take over your system, they just simply say "Integrity problem".  And
if
> you search all ptf cover letters you get 250 hits.  And that's just
the
> integrity problems - let alone all the OS failures, websphere
failures,
> etc.

I have no idea what you're saying here, Rob.  Are you saying there are
250 PTFs that you KNOW allow someone to completely take over an iSeries
machine?  How is this done?  Through TCP/IP?  Through adopting user
profiles?  Through a breakdown in object security?

Security by obscurity is certainly a problem, as Leif was always wont to
point out, but condemnation by obscurity is just as bad.  Please tell me
a dozen or so of the PTFs that allow security breaches and how they
work.

Joe