RE: Rewarding Challenge AS/400

[Chris Bipes <ChrisB@xxxxxxxxxxxxxxx>]

The biggest security risk is your employees.  Unless you are someone like
the government, military, or some big well known company that deals in
sensitive data like Equifax....  Use a good firewall to restrict what can be
accessed from the outside world.  All your dial up and web should be behind
this firewall.  Use only encrypted connections from the outside.  As for
real world risk, who would want access to your information and how well are
you known in the real world?  Have you had many attacks?  Lets see Sharper
Image,  not interested.  Credit cards number can be had from too many other
sources.  Hell I give my card to waiters?

Christopher K. Bipes    mailto:ChrisB@Cross-Check.com
Sr. Programmer/Analyst  mailto:Chris_Bipes@Yahoo.com
CrossCheck, Inc.        http://www.cross-check.com
6119 State Farm Drive   Phone: 707 586-0551 x 1102
Rohnert Park CA  94928  Fax: 707 586-1884

*Note to Recruiters
I nor anyone that I know of is interested in any new and/or exciting
positions. Please do not contact me.


-----Original Message-----
From: Joel Fritz [mailto:JFritz@sharperimage.com]
Sent: Wednesday, September 29, 1999 1:42 PM
To: 'MIDRANGE-L@midrange.com'
Subject: RE: Rewarding Challenge AS/400


I tend to believe nothing is secure.

I'm asking out of curiosity--what do you see as the real world risk to a
business system that has kind of an average attention to security, say one
that has credit card information.  Are we worrying about people who do this
for a living, hobbyists (some of whom are real good and highly motivated),
competitors...?  What are the biggest holes?  What can you do that gives you
biggest bang for the buck?

> -----Original Message-----
> From: leif@ibm.net [mailto:leif@ibm.net]
> Sent: Wednesday, September 29, 1999 11:58 AM
> To: MIDRANGE-L@midrange.com
> Subject: Re: Rewarding Challenge AS/400
> 
> 
> I see the humor, but the sad truth is that even the random number
> password is not secure.
> 
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---