RE: iSeries Security in Computerworld

I remember some guy a few years ago who was so proud that he could
connect to his AS/400 from home over the internet... He even published
his systems IP address so others could see his signon screen... Well I
took a look at his signon screen... and ... just for the heck of it
tried logging in as QSECOFR / QSECOFR ... It was dumbfounded when I got
a command screen!!!!

He was lucky it was me and not someone with a mean streak... 

I called him up and told him he might want to change his default
passwords!

Unbelievable!

Kenneth


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Chuck Lewis
Sent: Friday, November 03, 2006 1:13 PM
To: 'Midrange Systems Technical Discussion'
Subject: RE: iSeries Security in Computerworld

WOW - that is absolutely mind boggling Wayne. Bet you shook them up real
good !

Chuck

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Wayne McAlpine
Sent: Friday, November 03, 2006 3:54 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: iSeries Security in Computerworld

I remember being able to log on remotely to another state agency's 
system as QSECOFR QSECOFR not too many years ago.  They thought they 
could achieve security through obscurity until I pointed out how 
vulnerable they were.