RE: Recent bugtraq postings

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: James Rich
> 
> On Fri, 22 Apr 2005, Joe Pluta wrote:
> 
> > But my favorite is the one that warns that if you install Client
Access,
> > "malicious AS/400 applications can run programs on your PC."  Uh
huh.
> > Malicious AS/400 programs.  Sorry, but iSeries programmers actually
work
> > for a living.  We're unlikely to want to write applications that
wipe
> > out the workstations of our end users.
> 
> That's right.  All iSeries programmers are angels.  Since we actually
work
> for a living we would never do such a thing.  Every programmer who
knows
> RPG is by definition a saint.
> 
> Could a malicious program be written?  Certainly.  Could such a
program
> cause harm?  That is the point under investigation.  If so, then there
is
> a security flaw.  But to say that the iSeries is secure because
iSeries
> programmers are such good people that a malicious program would never
be
> written is ridiculous.

There's nothing I hate worse than when people put words in my mouth and
then argue with them.  You realize you're arguing with yourself, right,
Rich?

Because my point was nothing like what you're complaining about.  My
point is that the iSeries is a business computer and iSeries programmers
are business programmers, and those who attach via client access are
business users.  The idea of writing an iSeries program that would
attack an end user's PC is ludicrous.

Even if there were some moron who WOULD write a virus and to attack an
end user's PCs, they'd be out of a job pretty quick, and the word would
get around the community just as fast.  Point being that most iSeries
programmers don't have the combination of free time and ethical
bankruptcy required to write reverse viruses, and even if there were,
they'd be self-limiting.

Please, before you start ranting about what you think I mean, take a
second to ask, okay?

Joe