RE: Recent bugtraq postings

Patrick, I suggest that you notify your employer of this and let IBM's
legal department address it.  Any further public posting will only add
to this goober's pockets.  I do love his posts, though.  One is the
"LDAP exploit" in which, if LDAP is turned on, you can list other user
profiles.  Of course, he doesn't explain why that's a bad thing, or that
you can just as easily do the same thing using WRKUSRPRF *ALL.

But my favorite is the one that warns that if you install Client Access,
"malicious AS/400 applications can run programs on your PC."  Uh huh.
Malicious AS/400 programs.  Sorry, but iSeries programmers actually work
for a living.  We're unlikely to want to write applications that wipe
out the workstations of our end users.

Joe

> From: Patrick Botz
> 
> The following are my personal opinions and in no way reflect the
official
> position of my employer or anyone else...