Re: V4R3 Operations Console and DST user id/password

[John Earl <johnearl@xxxxxxxxxxx>]

david.kahn@gbwsh.mail.abb.com wrote:

> "Alex Moore" <alexm@ellishosiery.com> wrote:
>
> >DST (Dedicated Service Tools) User ID and Password are
> >documented in one of the few remaining paper manuals you
> >should have received with your system.  Probably not a good
> >idea to post the default, but it's really not that hard to find.
>
> Actually it's already been posted, but it's not really a secret. In any
> case security systems that rely on published information remaining secret
> from those who would misuse it are extremely dangerous.

Sage advice Dave.

Anyone  who is not already convinced of the need to change default passwords
should head over to dejanews and do a search  through the alt.2600* groups for
the string 'QSECOFR'.

You'll find that every month the hacker FAQ posts a list of default passwords 
for
a myriad of systems, including AS/400. QSECOFR, QSYSOPR, DST, they're all there
(OK, the FAQ is not completely right, but it's close enough to be of great
concern).  After reading through that, you wouldn't want to leave the default
passwords on any computing equipment, including (especially!) telephone 
switches.

jte

jte


--
John Earl   johnearl@toolnet.com

PowerTech Toolworks  206-575-0711
PowerLock Network Security www.toolnet.com
The 400 School   www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---