Om.. my.now that I stopped laughing and caught my breath I think I can type.....
Let's see..if I wrote on a sheet of paper, using a permanent marker, the code used in a virus.and you placed that on top the computer, would the virus transfer to that computer? I love doom-sayers... HI BRIAN! Nice reply.. ______________________________________________ Christopher E. Cancilla From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Lehrhoff Sent: Monday, July 14, 2008 7:44 PM To: [email protected] Subject: Re: [EDI-L] Has anyone seen a virus in an EDI file? The virus is stored deep inside the payroll system, at a level where the billable hours are calculated. It is triggered by a payload of idiocy perpetuated by consultants who only exist to bill and bill more. The payload will clog and shut down your edi translator, causing many hours of investigation and finger pointing, followed by many frantic phone calls from buyers and the warehouse trying to locate the orders. The virus then spreads to management, who conducts a witch hunt to assess blame and try to get the process moving. finally, in total disgust, management orders the system flushed and restarted. meanwhile, we the all-knowing are on vaca and a state of extreme bliss having missed the insanity. upon return we will delight in a rich belly laugh and proceed to realize that we know much more than the consultants will ever know. short answer: are you f****** kidding? Hurd, Richard [SLCUS] wrote: > Unless you're sending and storing binary objects, that's the most ridiculous thing I ever heard. > > EDI is textual information and needs to run through a translator. I sure don't see how a virus/trojan/etc. can make it through the transformational steps. > > Can you get some sort of certification from your EDI translator vendor that they don't execute the code, they only translate it? > > Can you also get certification from your VAN that your connection is secured? > > I would sure push the burden of this up to your service providers. > > Sheesh. Talk about an infosec group with Too Much Time On Their Hands. > > > > > -----Original Message----- > From: [email protected] <mailto:EDI-L%40yahoogroups.com> [mailto:[email protected] <mailto:EDI-L%40yahoogroups.com> ]On Behalf Of > Richard > Sent: Monday, July 14, 2008 3:49 PM > To: [email protected] <mailto:EDI-L%40yahoogroups.com> > Subject: [EDI-L] Has anyone seen a virus in an EDI file? > > > Hi all, > > We're fighting quite a battle here at my company with the InfoSec > (information security) folks and I could use some input from the group. > > The core issue is if an EDI file (X.12 format EDI document) could contain > a computer virus, trojan horse, worm, etc.? > > I say that no they can't but our InfoSec folks say "they could". Hence, > they're talking about requiring PGP encryption/decryption, SFTP/SSH > transmittals, full anti-virus scan before use, etc. > > I could see the encrypted transmittal session(s) for security sake, but > must I also pass a decrypted EDI file through an anti-virus software > checker before I can pass it on to my translator and/or before I send it > out? > > I'm curious what you've seen and/or what you're doing, especially if > you've actually had a computer virus try to piggyback onto an EDI file. > > Any comments are much appreciated. > > Richard Jones > > > > > ------------------------------------ > > ... > Please use the following Message Identifiers as your subject prefix: <SALES>, <JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>, <OFF-TOPIC> > > Job postings are welcome, but for job postings or requests for work: <JOBS> IS REQUIRED in the subject line as a prefix.Yahoo! Groups Links > > > > > > ------------------------------------ > > ... > Please use the following Message Identifiers as your subject prefix: <SALES>, <JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>, <OFF-TOPIC> > > Job postings are welcome, but for job postings or requests for work: <JOBS> IS REQUIRED in the subject line as a prefix.Yahoo! Groups Links > > > > > -- %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% % Brian Lehrhoff, EA ([EMAIL PROTECTED] <mailto:blehrhof%40cybernex.net> ) Messaging Consultant 201-913-4506 Upgrade your Quickbooks for 20% off at http://ea.brianlehrhoff.com Circular 230 Notice is located at http://ea.brianlehrhoff.com/230notice.html %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% % [Non-text portions of this message have been removed] ------------------------------------ ... Please use the following Message Identifiers as your subject prefix: <SALES>, <JOBS>, <LIST>, <TECH>, <MISC>, <EVENT>, <OFF-TOPIC> Job postings are welcome, but for job postings or requests for work: <JOBS> IS REQUIRED in the subject line as a prefix.Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/EDI-L/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/EDI-L/join (Yahoo! ID required) <*> To change settings via email: mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
