RE: DB2UDB hack

Meanwhile there has NEVER been a documented case of any sort
of buffer overrun, virus, or indeed anything else on a native i5/OS

system

(reaching back to the OS/400 and even CPF days as far as I know).

Again, this is a nice statement, but it is meaningless...I know this for a
fact.


Patrick Botz
IBM STG Lab Services Security Practice
botz@xxxxxxxxxx
work: 507 253 0917 mobile: 507 250 5644
http://www.ibm.com/systems/services/labservices

midrange-l-bounces+botz=us.ibm.com@xxxxxxxxxxxx wrote on 10/23/2007
02:43:48 PM:

From: Joe Pluta

This challenge is outstanding forever. I guarantee that I will never

pay

off on it. And until then, let's drop the nonsense that Windows

security

is equivalent to i5/OS security. That's simply rubbish.

And before some Windows apologist or *nix weenie demands that I hack

into

their machine, you're missing the point: your machines have ALREADY been
hacked. The exploits are numerous and documented and more continue to

come

down the pike. Meanwhile there has NEVER been a documented case of any

sort

of buffer overrun, virus, or indeed anything else on a native i5/OS

system

(reaching back to the OS/400 and even CPF days as far as I know).

So while the lack of proof is not proof of lack, I think the case for

i5/OS

is substantial. And if you don't, well, then, there isn't much going to
convince you now, is there?

Joe

P.S. Windows viruses on the IFS count only as Windows viruses. If you

don't

understand why that is, this isn't going to be a very fruitful

discussion

anyway <grin>.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.