RE: [Security400] test?

[hs@xxxxxxxxxxxxxxxx]

Well,
seems i started a thread just by testing?

I happened to be called by a company for auditing
their security audit... This has been done by a 
small security company checking all systems of my
customer (PC, Unix, iSeries, S/390 etc). They
spent a lot of time on claiming problems with
the Windows-Systems, reporting update problems
on the unix boxes etc. Regarding the iSeries-
Systems, they wrote in their executive report:
"This is an IBM Server and thus secure by default."

As i came into that company they showed me that
report. I grabbed the next Twinax Terminal
in the office, did DSPSYSVAL QSECURITY,
guess the result. -> 30

No more comments needed.

-h

**********************************
* AS400Profis.de
* Holger Scherer
* Milbertshofener Str. 34
* D-80807 München
* info@xxxxxxxxxxxxxxxx
* Tel. 089-35319553 (09:00 bis 20:00)
* Fax. 089-35319555
**********************************
 

-----Original Message-----
From: Dave Odom [mailto:Dave.Odom@xxxxxxxxxxxx]
Sent: Thursday, November 04, 2004 10:16 PM
To: security400@xxxxxxxxxxxx
Subject: RE: [Security400] test?


Charles,

While all of your points are mostly true, the last one is the biggest
problem wherein shops often negate the first of your points.

I'm originally from the mainframe environment where security was
serious business and taken seriously and has been since the 60's.   

Take care,

Dave 
Arizona