RE: i5 Youngsters

<<How many people are actively looking for issues in i5/OS? Any?>>

Rochester has a whole bunch dedicated to this task.

Paul Nelson
Cell 708-670-6978
Office 512-392-2577
nelsonp@xxxxxxxxxxxxx


-----Original Message-----
From: midrange-nontech-bounces@xxxxxxxxxxxx [mailto:midrange-nontech-bounces@xxxxxxxxxxxx] On Behalf Of Walden H. Leverich
Sent: Tuesday, January 15, 2008 2:54 PM
To: Non-Technical Discussion about the AS400 / iSeries
Subject: RE: i5 Youngsters

Between 2003 and 2008, i5/OS V5Rx was affected by 1 Secunia
issued advisory which was non critical and has been fixed.

Actually, if you include OS/400 V4 and V5 then you're up to 10. :) And IBM isn't exactly forthcoming with information about security and stability issues (see: information in "integrity ptf" cover letters, or rather the lack of information).

Seriously though. Given that every tom dick and harry can get a copy of W2K3 and bang on it in their free time does that surprise you? And most of these "advisories" were nearly impossible to exploit on a properly secured box anyway. How many people are actively looking for issues in i5/OS? Any? There are companies that do just that for Windows.

Now, I'll admit that's a double edged comment. You can say i5/OS doesn't need to be checked since it's so secure, and I'll say, they've not found as many issues because no one is looking.

-Walden