RE: Rewarding challenge AS/400...

["Marilyn Jull" <fcsltd@xxxxxxxxxxx>]

At my last client, their "Security Team" insisted that all users HAD
TO have their Social Security numbers typed into their User Profile data.  
EVERYONE who could look at profiles could see EVERYONE's SSN (USA only).
Pretty scary.  Good thing for me - I'm from Canada!  So I am still 
incognito!


>From: "Dan Bale" <dbale@genfast.com>
>Reply-To: MIDRANGE-L@midrange.com
>To: MIDRANGE-L@midrange.com
>Subject: RE: Rewarding challenge AS/400...
>Date: Thu, 23 Sep 1999 12:05:28 -0400
>
>
>
>Brad,
>
>In the context of users in an office voluntarily sharing passwords (i.e., 
>the
>password "book"), I would argue that JoeUser / JillUser isn't about to go
>hacking through the AS/400 or other resources to get at their fellow
>officemate's social security number for the sole purpose of signing on to 
>the
>AS/400 using that person's user profile.  In that context, do you suppose 
>that
>users would add a column in that password book to add their social security
>numbers?  I doubt it.  I know I wouldn't.
>
>________________________ Original Message _________________________
>
>SSN is nothing special these days.  It isn't tough to get anyone's number
>with a little work.  It's turned into something it was never meant to be, a
>unique indentifier for an individual.
>
>Mother's maiden name is also getting to be overused. They should just make
>you type in your weight or something.  Since everyone lies about this, 
>using
>the ACTUAL weight would be something no one could find out.  ;)
>
>Bradley V. Stone
>BVS/Tools
>http://www.bvstools.com
>
<SNIP>

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---