Re: Fix Security (was: Paging file)

[qsrvbas@xxxxxxxxxxxx (Tom Liotta)]

midrange-l-request@midrange.com wrote:

>   1. Re: Fix Security (was: Paging file) (Leif Svalgaard)
>
>From: Leif Svalgaard <leif@leif.org>
>> From: jt <jt@ee.net>
>> > Yes, I see the advantage (as I said).  I also see the tradeoff.
>> If you don't trust the vendor, then the situation
>> is also simple: don't install his product, period.
>
>as we discussed on the MI400 list. If you had a malware checker
>that, for instance, could check a save file before you restored
>anything from it, you would have a somewhat better defense.

Yeah, right...

Back in '93-'94, I had the privilege of working on a project for COMMON with 
Steve Glanstein, Charlie Massoglia and Joe Park; the task was essentially to 
survey the state of security on AS/400s and report to the membership. (Wow! 
What an assignment!}

After getting to know a bit about Joe and what he could do, I was posed a 
question by him: "If I sent you a tape, would you load it on your system?"

I suspect that even at V5R2, my answer will generally be "No." On my personal 
system at home as it sits right now, it'd be a definite "Yes!" But not on any 
live business system. (Absolutely no offense intended to Joe. The guy simply 
opened my eyes from a few things I learned from him.)

OTOH, Leif, if you were to ask me to test a malware checker that you'd written 
and use one of Joe's tapes for input....? Hmmmm.... now that'd be fun...

Tom Liotta


--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertechgroup.com


__________________________________________________________________
The NEW Netscape 7.0 browser is now available. Upgrade now! 
http://channels.netscape.com/ns/browsers/download.jsp

Get your own FREE, personal Netscape Mail account today at 
http://webmail.netscape.com/