Re: DASD clearing, "Killing" an AS/400

[John Earl <johnearl@xxxxxxxxxxxxxxxxxx>]

Steve Glanstein wrote:

> SOAP BOX MODE(ON)
>
> My concern about security and hacking the AS/400 is no longer focussed on
> IBM nor on the publications in this list...It really is focussed on the
> sloppy software vendors who give the public *ALL authority to files,
> *ALLOBJ authority to a group profile, and/or sign on as security officer
> with default passwords, etc.
>
> SOAP BOX MODE(OFF)

Hear Hear!!!

(Climbing onto my own soapbox)

The software vendors that you all know and love are really your worst security
nightmare.   I've got a session at COMMON and a blistering article sheduled for 
the
November edition of News/400 that takes software vendors to task for some of 
their
sloppy-assed practices.....   It's way past time they got their house in order.

IMHO, the AS/400 is a great e-business machine, but the way we secure our
applications make it too risky to ever put most of our current AS/400's on the
web.   That's gotta change, and the Third Party Application Vendors ought to 
lead
the way for their customers.

(stepping down)

jte



--
John Earl                                           johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---