RE: AS400 user password

["Shaw, David" <dshaw@xxxxxxxxxxx>]

> -----Original Message-----
> From: John Earl [mailto:johnearl@400security.com]
> 
> I don't think that IBM is ignoring security or putting their 
> head in the sand,
> they just got blind-sided on this issue.  What I'd like to 
> see is a reporting
> infrastructure that will allow word to get to the right 
> people in a timely
> fashion, so that IBM (and all of us!) doesn't get blind-sided 
> again.  If the
> reporting mechanizm for security breaches is lacking, then I 
> want to see it
> fixed.  Security is important enough to deserve a fast path 
> through the support
> infrastructure, and a more visible and easier to use 
> reporting mechanizm for
> security may have got word to the right people at the right time.

I agree.  I think that there's also a perception issue for many of us that
have been around for a while that needs to be corrected.  There's been a
change in the way that Rochester, Toronto, and the other labs respond to
many of these issues.  Today when something like this is reported, the
developers are authorized to jump in and do something about it, with
management blessing.  This is not the way things were 10 or 15 years ago,
when development staff was always over-committed and management would
stonewall customers because they had other priorities.  Many of the old
issues that we've given up on would now be acted upon if the current
developers were made aware of them.  We as customers need to get over the
notion of "Well, I reported it in 1990 and nothing was done, there's no
point in bringing it up again."

This is all just MHO, of course.

Dave Shaw
Spartan International, Inc.
Spartanburg, SC
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---