Re: Preparing for a High-profile Termination

Does anyone remember the name Donald Gene Burleson? He was famous in Fort Worth for his computer crime in on a S/38 in the 80's.
He was also the first person convicted under the Texas Computer Crimes Act of 1985...

http://www.google.com/search?sourceid=navclient&ie=UTF-8&rlz=1T4GFRC_enUS215US215&q=Donald+burleson+computer+crime

From:
http://www.crime-research.org/library/crime1.htm

<excerpt>
Grudge Attacks
Not all computer criminals are after information or out to cause havoc by planting viruses. Some simply want to wreak damage and destruction. One of the better known cases in this category is that of a Texas insurance company employee, Donald Gene Burleson. Burleson was a systems security analyst who worked for his employer for more than two years before being fired. After he left the firm, its IBM System/38 crashed, and the company suffered a major loss of commission records used to prepare the monthly payroll. The program responsible for the problem was traced to Burleson's terminal and his account. Investigators were able to show that he had planted a "logic bomb" in the program while he was still with the company.
</excerpt>

- Steve

----- Original Message ----- From: "Larry Bolhuis" <lbolhuis@xxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, July 03, 2007 12:37 PM
Subject: Re: Preparing for a High-profile Termination

Review all programs that operate with adopted authority of powerful
profiles.

Review every user profile that gets changed or created upon termination.

Absolutely do not assume backdoor access will us a profile with a
recognized name! Like the Book of Hezekia in the Bible, how many of you
can tell me quickly which of the following user profiles does not
belong: QPEX, QNTP, QSMTP, QMSF, QIPP, QTCM?? (There is no Hezekia by
the way but it will send most people looking!) If an adopted profile
program lays in the right place (i.e. as a fake Trigger program or as a
powerful profile's signon program) access may be re-created
automatically by this program and it might not happen for weeks or even
months when your vigilance is worn.

- Larry