Re: Book on Hacking the iSeries

[<franz400@xxxxxxxxxxxx>]

If you did a poll of all the listeners on this list, not just those who post, you might find that very few have actually read the IBM manuals or the Expert Guide you have mentioned (I have not read "all"). Also, I have seen where even when shown the documentation, many managers refuse to allow stricter implementations (for a number of reasons, few of which we might agree with). Another voice out there reminding us not to be complacent is not a bad thing.
Jim Franz 
 
---- ALopez@xxxxxxxxxx wrote: 
> > Has anyone read this book?  Is it a worthwhile investment?
>
> You can check out some of what he's written at www.venera.com. 
>
> I believe it is fair for me to say that most readers of this list believe 
> that he overstates, at best, the security exposures in certain areas.  I 
> also believe that most of what he exposes would not be relevant at 
> locations that have actually looked at security using either the IBM 
> redbook, "Implementing AS/400 Security", or "Experts' Guide to OS/400 and 
> i5/OS Security".  I know the only thing he's pointed out that we haven't 
> covered here where I work is the ability of an AS/400 programmer to use 
> Client Access's remote command feature from the iSeries back to the 
> PC--something we use in house for known purposes anyway.
>
> My personal recommendation is to get the "Experts' Guide..." listed above 
> by Carol Woodbury and Patrick Botz.  Only after you've processed that 
> should you consider Shalom's.  Some on this list may take umbrage with me 
> for allowing any use of his research, but hey, I'm one of those guys who 
> Googles "iSeries+hacking" once a week, just to see if anything new is out 
> there.... 
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.