Re: Rewarding Challenge AS/400

[dhandy@xxxxxxxxxxx (Douglas Handy)]

Jim,

>In this case, I do not believe that ignorance is bliss.

"When ignorance is bliss, 'tis folly to be wise."  is the real quote
that most people know only as "ignorance is bliss".

This particular case appears to be another example where the vendor
(IBM) has been contacted and told about the hole privately so they
have time to react and put out PTF's or whatever before it is widely
known by hackers/crackers.

But, like many other cases in the news recently, there was not much
reaction from the vendor as long as he kept it private.  Leif has
given IBM an order of magnitude more time than we typically hear about
with MS products.  And I sure hope he has well-documented his efforts
to notify IBM, if he decides to go public with more details.

This hole may not be big enough to drive a truck through, but you can
sure drive a PC through it.  And most hackers have a PC...

Doug

PS - Have you noticed we haven't heard from Steve since Leif posted a
password in response to Steve's challenge?  What do you infer from
Steve's lack of denial?
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---