RE: [Security400] Authority annoyances, continued...

[rob@xxxxxxxxx]

I knew a company in Kalamazoo that did something very similar to this on
their S/34.
Lock down the computer room
Restore the executive data.
Run the executive payroll
Backup the executive payroll
DELETE with the option to write binary '0' on all of the files
Leave the computer room.

Rob Berendt

==================
A smart person learns from their mistakes,
but a wise person learns from OTHER peoples mistakes.



                    "Jim Langston"
                    <jlangston@celsinc.c       To:     
<security400@midrange.com>
                    om>                        cc:
                    Sent by:                   Subject:     RE: [Security400] 
Authority annoyances, continued...
                    security400-admin@mi
                    drange.com


                    08/29/2001 11:44 AM
                    Please respond to
                    security400






I worked at one company where they told me how they used to print
payroll checks (before my time).

They would run everyone's checks as normal, except for the excecutives.
Then they would make a complete backup of the system.  The Payroll
officer would come into the computer room and kick everyone out, and
restore a tape with the executives pay information onto their system
(a McDonald Douglas Pick system) and process the checks and print
them with the system in a restricted state.  After the checks were
printed and the new information saved back to the executive tape,
the payroll officer would stick the backup tape back into the system
and do a bit level restore.  Then walk away with the payroll checks
and Executive pay tape.

Very secure, but what a hassle.

Regards,

Jim Langston
Programmer/Analyst
Cels Enterprises, Inc.

-----Original Message-----
From: security400-admin@midrange.com
[mailto:security400-admin@midrange.com]On Behalf Of Jeff Crosby
Sent: Wednesday, August 29, 2001 9:27 AM
To: security400@midrange.com
Subject: Re: [Security400] Authority annoyances, continued...


rob@dekko.com wrote:

> Spool file security...
>
> We actually got a call from someone onetime that their paycheck was wrong
> before it was printed.  Seems that they were matching up the wrong stub
> with the paycheck.  We decided to promote this blond high up into HR -
> seriously.

Gasp! and ROTFLMAO! both at the same time. :0

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/security400
or email: Security400-request@midrange.com