Sent from my iPhone On 20/08/2011, at 5:27 AM, "R.S." <[email protected]> wrote:
> W dniu 2011-08-19 10:07, Jim Thomas pisze: >> Folks, >> >> Why does everybody insist on overlooking the obvious ??. >> >> The hell with how quickly you apply fixes. > Agreed. > >> MVS (or OS/390 or z/OS or whatever you want to call it) has >> NEVER been hacked or destroyed by an ex employee !!. > > How do you know? > Do you expect any financial company to make an advertisement "Hello! We're > open for hackers!". I suspect that no company want do disclose it. > >> In fact, let me re-state that .. the mainframes HAVE NEVER >> been hacked or destroyed by an ex employee !!. > > Well, I know such evidence (maybe it was misuse - it's a matter of definition > of "been hacked"), cannot provide details. > Another, publicly known example: Kevin Mitnick. Obviously he wasn't > ex-employee (is it better?), and he hacked people, not systems. So? > > Some remarks: > 1. "Mainframe system" could mean z/OS or poorly configured Linux. Is the > Linux on mainframe any more secure than Linux on PC? IMHO the difference is > none or very small. > 2. Usually "mainframe systems" are big, very big or huge installations when > compared to PC installations. There is no reason to compare small PC server > in small company to huge financial system. > 3. Ex-employees hacking, social hacking - that could affect any platform, the > platform resilience play minor role here. Again, usually the bigger comany > the better rules apply. > 4. Obviously (for us, mainframers) it's much easier to set up secure > mainframe shop, that to set up secure PC installation. More, PC installation > cannot achieve the level of security which is available for mianframe (with > z/OS). It's like bank safe and tent: you can leave both open - and security > is comparable (and poor). You can also try to secure both - then you have > good effects with safe, but still poor effects with a tent. > > Regards > -- > Radoslaw Skorupka > Lodz, Poland > > > -- > Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku > przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by > jedynie jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste > adresatem niniejszej wiadomoci lub pracownikiem upowanionym do jej > przekazania adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, > rozprowadzanie lub inne dziaanie o podobnym charakterze jest prawnie > zabronione i moe by karalne. Jeeli otrzymae t wiadomo omykowo, > prosimy niezwocznie zawiadomi nadawc wysyajc odpowied oraz trwale > usun t wiadomo wczajc w to wszelkie jej kopie wydrukowane lub > zapisane na dysku. > > This e-mail may contain legally privileged information of the Bank and is > intended solely for business use of the addressee. This e-mail may only be > received by the addressee and may not be disclosed to any third parties. If > you are not the intended addressee of this e-mail or the employee authorised > to forward it to the addressee, be advised that any dissemination, copying, > distribution or any other similar activity is legally prohibited and may be > punishable. If you received this e-mail by mistake please advise the sender > immediately by using the reply facility in your e-mail software and delete > permanently this e-mail including any copies of it either printed or saved to > hard drive. > BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax > +48 (22) 829 00 33, e-mail: [email protected] > Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru > Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88. > Wedug stanu na dzie 01.01.2011 r. kapita zakadowy BRE Banku SA (w caoci > wpacony) wynosi 168.346.696 zotych. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
