RE: Recent bugtraq postings

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: James Rich
> 
> If the flaw actually exists and is as described then it is a security
> problem. That the iSeries is a business computer doesn't somehow
negate
> such security problems.  If there is a problem fix it, don't avoid it
by
> saying everyone is too busy to notice.

Dude, it's not a flaw.  As Vern said, it's a configuration issue.  But
semantics aside, I think it should be addressed, just like any other
access issue.  I never said don't do anything about it -- words you keep
shoving in my mouth -- I just said the percentage of brain-dead
ethically bankrupt morons that would write such a virus is miniscule
among iSeries programmers.

Franz points out that such morally compromised idiots do exist, but in
my experience any lowlife pond-scum who hacked an end-user as described
would be fired immediately.  Thus the term "self-limiting".

<point>
Here's my point, and this is my ONLY point: a programmer would have to
be a total loser psycho to do such a thing, and if caught, would be
fired.
</point>

This is NOT to say, by the way, that some total loser psycho corporation
wouldn't put a programmer up to such nonsense.  This is just the sort of
thing that paranoid-delusional "security experts" might put in place to
"monitor employee efficiency".

I was just commenting on the unlikelihood of an iSeries programmer
having the time or motivation to do such a thing.  That's all.  Stop
attributing terms like "avoid it" and "too busy to notice" to me.  If
you want to complain about something I say, stick to direct quotes; your
paraphrasing has been more than a little inaccurate so far.

Joe