Re: Getting started with Net.data -was -I'dbetterdomorethan talk

PTFs are like fixpacks, and there are plenty of them. The first pack
comes already with the instalation disks, so completing the instalation
implies to have the latest PTFs installed. That may not be the best an
i can be, but it is already much better hardened than a windows
configured by a very good specialist in security.
Security level is similar to the best you can get in Unix.
To disable a users account is easy, just try a few times with the wrong
password, to disable a "system's" account you will need the qsecofr
password. To install a trojan you will need a user profile with the
rigth to install programs.

Thorbjørn Ravn Andersen wrote:

Dr. Syd Nicholson skrev den 18-08-2008 22:26:

Why does this client use "i"? -- They use it because with "i" they can run a
24/7 shop with zero IT staff. That right, there are no IT staff. This
company pays a retainer for support on an as required basis and have worked
this way since 1994. Never has the system failed in all this time.

Very interesting :) You got me curious - I believe that the PTF's are
fixpacks for the i. What is the schematic for rolling these in? Or are
these so rare that it doesn't really matter?

One of the things I have found with the i, is that it is not hardened
very well at the time of installation, and that it doesn't take much
effort to e.g. disable an account or put in a trojan (not that I've ever
done that, oh no). Then I wonder why this shop dares to put an i to be a firewall - has it been sufficiently hardened by the retainer or is the
i such a tiny niche that there is no need to worry?