Re: Re: Recent bugtraq postings

[Steve Richter <stephenrichter@xxxxxxxxx>]

On 25 Apr 2005 16:26:58 -0000, shalom@xxxxxxxxxx <shalom@xxxxxxxxxx> wrote:
> Hi Steve,
> 
> You asked
> > Show me where to find a Linux "boot disk" that will allow you to change 
> > QSECOFR's > password like you can with the Administrator password in 
> > Windows:
> 
> Your iSeries comes with a built-in "boot disk" that allows you to do exactly
> what is described in the article you rerer to. It is called DST, and it 
> requires
> physical access to the server (just like the boot CD trick).

you need physical access and a password to use SST to hack into an
as400.  In the example Steve posted, you only need physical access to
the PC  ( although, you could probably use a BIOS password to disable
the floppy drive )

-Steve

> 
> The iSeries platform is not more secure, it is more securable,
> and only if you know what security issues to look after.
> 
> Cheers,
> Shalom Carmel
> -------------
> www.venera.com - Exposing iSeries insecurity
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
> 
>