Re: Interesting discussion on ServerFault regarding an idiotic auditor ...

All the poster said is that it was a small UK company and they he
switched to PayPal for the quick fix. PCI is investigating the
company.

Glad I didn't have to deal with that moron. I would have asked how he
proposed me getting the plain-text passwords from the user accounts
when it is a one-way hash and to have a great guru like himself could
teach me something I didn't know.

--
Mike Wills
http://mikewills.me



On Wed, Jul 27, 2011 at 1:44 PM, Larry Paque <larry@xxxxxxxxx> wrote:

The only reasonable (if that's the word) explanation I can think of is that
the auditor had his email hacked and the poster is emailing with the hacker
or his cohort.

I was reading quickly - did he ever get anybody on the phone?

On Wed, Jul 27, 2011 at 1:37 PM, Mike Wills <mike@xxxxxxxxxxxx> wrote:

Reading through the demands. I don't think any of us could provide
that on the i either. IIRC, I believe most log in systems these days
store the hash then compare the two hashes to make sure they match.
The systems themselves may not even know the real password.

--
Mike Wills
http://mikewills.me



On Wed, Jul 27, 2011 at 12:12 PM, David Gibbs <david@xxxxxxxxxxxx> wrote:

http://urlq.us/2g


--
IBM i on Power Systems - For when you can't afford to be out of business
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)

mailing list

To post a message email: Security400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.