Your moniker seems to implies that you work for STK and your posts indicate that you like to tilt at windmills so your last post peaked my interest. Your comment toward IBM, "because I know that gets their attention.", interests me. Do you know of any phrase that will get STK's interest?
Jack Kelly LA Systems @ US Courts x 202-502-2390 Paul Gilmartin <[EMAIL PROTECTED]> Sent by: IBM Mainframe Discussion List <[email protected]> 03/19/2007 10:28 PM Please respond to IBM Mainframe Discussion List <[email protected]> To [email protected] cc Subject OMVS Password Display Security (was: REXX Question) In a recent note, Tomas Fott said: > Date: Mon, 19 Mar 2007 19:35:46 -0500 > > If logmode is D4B32XX3 (non-SNA) or D4C32XX3 (SNA) then the rexx works OK. > If logmode is D4B32782 D4B32783 .. (NON-sna) or D4C32782, D4C32783 ... > (SNA) then start field is translated to colon. > The foregoing discussion has been entirely sufficient to persuade me that in view of the variety of logmodes and terminal emulators any attempt to mask input fields reliably by embedding 327x control codes in (emulated) linemode data streams is an exercise in futility. Just when your client believes you have succeeded he'll make some purportedly insignificant change and present you with a trouble report. Meanwhile, the chatter has motivated me to submit my long-imagined PMR concerning the failure of 3270 OMVS to entirely mask passwords when the programmer uses "stty -echo" or tcsetattr( - ECHO ). I took care to use the term "security" in both the Abstract and the Text because I know that gets their attention. -- gil -- StorageTek INFORMATION made POWERFUL ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
