Re: QSYS.LIB under IFS root -- MIDRANGE-L

Subject: Re: QSYS.LIB under IFS root
From: Patrik Schindler <poc@xxxxxxxxxx>
Date: Mon, 27 Apr 2020 15:21:35 +0200
List-archive: <https://archive.midrange.com/midrange-l/>
List-help: <mailto:midrange-l-request@lists.midrange.com?subject=help>
List-id: Midrange Systems Technical Discussion <midrange-l.lists.midrange.com>
List-post: <mailto:midrange-l@lists.midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=unsubscribe>

Hello noname. :-)

Am 27.04.2020 um 14:13 schrieb iseriesstuff <iseriesstuff@xxxxxxxxx>:

What if the share is given only explicit authority (pgmr, admin, etc), a name that is not viewable via explorer (containing the $ character), and maximum users is set to 1. Would this still be an audit issue?

I'd say yes: If the share is mounted somewhere and the ransomware has spread to that somewhere, it's still catastrophic.

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://www.pocnet.net/poc-key.asc

As an Amazon Associate we earn from qualifying purchases.

This mailing list archive is Copyright 1997-2025 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.