RE: DB2UDB hack

--
John Earl, VP and Chief Technology Officer
PowerTech: 253-872-7788
Direct: 253-479-1408
Mobile: 206-669-3336
John.Earl@xxxxxxxxxxxxx




Email is an excellent way to communicate material that is not time
sensitive. If your communication is of a more urgent nature, please
call.

===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
bounces@xxxxxxxxxxxx] On Behalf Of Joe Pluta
Sent: Tuesday, October 23, 2007 6:08 AM
To: 'Midrange Systems Technical Discussion'
Subject: RE: DB2UDB hack

From: Lukas Beeler

There are lots of things that can compromise the security of my

machine, but

i5/OS ain't one of them - it's people making decisions that

degrade

the

Let me disagree here a bit. I know many, many shops that run

unencrypted

5250/ODBC/FTP to their System i.

It is difficult for me to describe in polite terms the people that run
their
shops this way.

[jte] It's easy for me. I call them "The Majority"

This is horribly insecure, but it is a default configuration

supplied by

IBM.

If you don't know enough how to set up your production machine, you

hire

John Earl to do it for you.

[jte] Thanks for the plug Joe - the check is in the mail :)



jte