W dniu 2017-07-12 o 15:53, Charles Mills pisze:
I know some malware for Win10, but I cannot remind any for z/OS 1.4...
Partially because most of the community has a policy of publicizing
vulnerabilities, but z/OS does not. The fact that you do not know of any
malware for z/OS 1.whatever does not mean that it does not exist.
Or expanding on Timothy's point, if you were developing malware, you would
have an interesting decision which of the two operating systems to target.
Windows is high number of instances/low value each -- kind of the WalMart
shopping of malware opportunities. z/OS is low number of instances/high
value each -- kind of the Tiffany of malware opportunities. With Windows you
would take a shotgun approach: "how many machines can I infect, and hope to
make some money off of a percentage?" so naturally some number of your
targets would end up discovered and publicized. With z/OS, you would take a
very targeted approach: "what one machine can I break into and steal a lot?"
Whether you were successful or not, there might not end up being any
publicity.
Phrasing it differently, for Windows you would develop "malware" -- mass
market malware, that would end up with a name and publicity (named by the
anti-malware folks, not the authors). For z/OS, you would develop a specific
targeted attack. It might be an "approach," not a "malware package," and
might not end up with a name (other than "XYZ Bank's ATMs were down for the
third day in a row ..." or "ABC Airlines experienced a massive outage
yesterday ...").
The absence of evidence is not the evidence of absence.
True, but ...I still rely more on z/OS 1.4 than on Windows 10. In case
of Win10 I have proofs of evidence - it is a little bit more than lack
of proofs.
BTW: z/OS is quite old (including previous names) - how many viruses are
known for this system? Yes, I know, the absence of evidence is not the
evidence of absence - however it's 50+ years of the absence!
Last, but not least: I'm NOT saying that running unsupported (and not
patched) system is something good. Even for zOS family.
However keeping very important data in Windows system is also not good
idea, is it?
Regards
--
Radoslaw Skorupka
Lodz, Poland
======================================================================
--
Treść tej wiadomości może zawierać informacje prawnie chronione Banku
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.
This e-mail may contain legally privileged information of the Bank and is
intended solely for business use of the addressee. This e-mail may only be
received by the addressee and may not be disclosed to any third parties. If you
are not the intended addressee of this e-mail or the employee authorized to
forward it to the addressee, be advised that any dissemination, copying,
distribution or any other similar activity is legally prohibited and may be
punishable. If you received this e-mail by mistake please advise the sender
immediately by using the reply facility in your e-mail software and delete
permanently this e-mail including any copies of it either printed or saved to
hard drive.
mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa,
www.mBank.pl, e-mail: kont...@mbank.plsąd Rejonowy dla m. st. Warszawy XII
Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców
KRS 0000025237, NIP: 526-021-50-88. Według stanu na dzień 01.01.2016 r. kapitał
zakładowy mBanku S.A. (w całości wpłacony) wynosi 168.955.696 złotych.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
