Re: Here is a real reality check for every PC user... -- PCTECH

Joe - but the iSeries is a "server" and you need to match server to serverto be fair.

A well configured Windows server is way beyond XP Pro desktop.

It is a given, proven over & over that MS desktop applications have had &continue

to have problems. But now you have to picture that "more vulnerable" desktop
communicating with the iSeries (Client Access or thru IE/html or whatever).
A keyboard logger on the pc can log your iSeries

profile & password....Now picture yourself not with your "developmentserver", but

a large corporate iSeries....

I think you have to start with the assumption that a legit profile can behad. Now

what doors do you need to close?
jim franz

----- Original Message -----From: "Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>

To: "'PC Technical Discussion for iSeries Users'" <pctech@xxxxxxxxxxxx>
Sent: Wednesday, December 28, 2005 9:24 PM
Subject: RE: [PCTECH] Here is a real reality check for every PC user...

Walden just wants to see me pop a vein... <laughing>

Walden, the iSeries is at least 2 orders of magnitude more secure than a
Windows desktop, depending on which way you want to measure security,
especially since you now have to rely on a two- or three-pronged security

system (MS, your favorite virus protection and your favorite mailscanner).

This is especially true now that we know that the major security vendorsare

in league with other major corporations to allow them to install spyware
such as the Sony rootkit, which laid open every machine that played a Sony
music CD to complete takeover.

To hacker-proof my iSeries I just turn on security level 50 and don't run

scripting tools like PHP. I follow normal procedures such as making suremy

HTTP pages are written professionally (that is, without SQL injection
faults) and I don't let OS/400 user profiles and passwords out into the
wild.

It's a LOT easier than locking down Windows and keeping it secure.

Joe

From: Walden H. Leverich

Just as a reality check for every iSeries user too... The iSeries isn't
hacker-proof either. Yes, I'll admit it has many advantages, but we
can't sit back, kick up our heals, and say gee, look, that's all stuff I
don't have to care about.

--

This is the PC Technical Discussion for iSeries Users (PcTech) mailinglist

To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.