Re: DR Failover

2019-05-10 Thread Laurence Chiu
I need to check with our account manager again but this is my understanding. We just replaced our DR mainframe with a Z14 ZR1. Part of the acceptance testing was running our full DR suite at the DR site. So we activated a CBU which lasted 14 days I am told and ran our tests. The purchase of the

Re: Can backup mechanisms be used to steal RACF database? was Re: mainframe hacking "success stories"?

2019-05-10 Thread Andrew Rowley
On 11/05/2019 12:34 am, Dana Mitchell wrote: Doesn't the KDFAES password encryption algorithm make it *much* more difficult to crack passwords, given access to the RACF database? I realize nothing is impossible to crack.. but at least not currently feasible with current available hardware.

Re: LU name and RACF ID is SMF records

2019-05-10 Thread Tony Harminc
On Tue, 7 May 2019 at 09:04, Jorge Garcia wrote: > We want to obtain LU name and RACF ID associated from SMF records or > anyother source. We don't have available SMF record type 33. This LU name > is available in TELNET profile > > LUGROUP LUMAJ > T900D001..T900D030 > > We don't know if

Re: Can backup mechanisms be used to steal RACF database? was Re: mainframe hacking "success stories"?

2019-05-10 Thread ITschak Mugzach
yes, it is an option, but the solution recommended by the vendor is srver mode. however, not all products/features that are based on this product support server mode. On Fri, May 10, 2019 at 6:43 PM Seymour J Metz wrote: > Couldn't you grant the access only through PADS? > > > -- > Shmuel

Re: mainframe hacking "success stories"?

2019-05-10 Thread Anne & Lynn Wheeler
l...@garlic.com (Anne & Lynn Wheeler) writes: > Later two of the Oracle people in the Ellison meeting have left and are > at a small client/server startup responsible for something called > "commerce server" and we are brought in as consultants because they want > to do payment transactions on the

Re: mainframe hacking "success stories"?

2019-05-10 Thread ITschak Mugzach
Radoslav, I agree that people are the problem not the systems, but remember that systems are developed by humans. both, developers & sysprogs do mistakes. sorry to report that they (mistakes) are quit common. and for the product, it is VERY common. It speedup data retrieval form racf by reading

Re: mainframe hacking "success stories"?

2019-05-10 Thread Bill Johnson
https://www.share.org/blog/mainframe-matters-how-mainframes-keep-the-financial-industry-up-and-running   Sent from Yahoo Mail for iPhone On Friday, May 10, 2019, 2:00 PM, R.S. wrote: W dniu 2019-05-10 o 19:50, Bill Johnson pisze: >

Re: mainframe hacking "success stories"?

2019-05-10 Thread Tom Brennan
Yep - that's what I was told. Of course it may have been just LzLabs' hope, or just talk. On 5/10/2019 10:53 AM, R.S. wrote: W dniu 2019-05-10 o 19:48, Tom Brennan pisze: And while I haven't heard any news about LzLabs (z/OS simulation on Linux) in the past couple of years, I was once told

Re: Machine or O/S (z/os) instruction to recognize a zpdt ?

2019-05-10 Thread Tom Conley
On 5/10/2019 12:38 PM, Mike Stramba wrote: Is there a machine or z/os instruction / command to recognize "real iron" rather than a zpdt or "other" emulation system? I realize that emulating the real hardware is the point, and that maybe ??? there is no way the o/s can know "for sure" ? .. Or

Re: mainframe hacking "success stories"?

2019-05-10 Thread R.S.
W dniu 2019-05-10 o 19:48, Tom Brennan pisze: And while I haven't heard any news about LzLabs (z/OS simulation on Linux) in the past couple of years, I was once told their initial customers were going to be large European banks.  If so, those banks didn't really care what platform they were

Re: mainframe hacking "success stories"?

2019-05-10 Thread R.S.
W dniu 2019-05-10 o 19:50, Bill Johnson pisze: https://www.allerin.com/blog/why-do-banks-still-use-mainframes https://www.networkworld.com/article/3148714/why-banks-love-mainframes.html https://www.americanbanker.com/news/why-citi-is-buying-ibms-new-mainframe-for-mobile-transactions There are

Re: mainframe hacking "success stories"?

2019-05-10 Thread R.S.
W dniu 2019-05-07 o 21:33, ITschak Mugzach pisze: There are ways to collect IDs that might be used to penetrate the mainframe: - users defined to UADS but not to RACF. I properly managed system UADS-only  user cannot even succesfully logon. However it is not a problem since in properly

Re: mainframe hacking "success stories"?

2019-05-10 Thread Bill Johnson
https://www.allerin.com/blog/why-do-banks-still-use-mainframes  https://www.networkworld.com/article/3148714/why-banks-love-mainframes.html  https://www.americanbanker.com/news/why-citi-is-buying-ibms-new-mainframe-for-mobile-transactions   Sent from Yahoo Mail for iPhone On Friday, May 10,

Re: mainframe hacking "success stories"?

2019-05-10 Thread Tom Brennan
And while I haven't heard any news about LzLabs (z/OS simulation on Linux) in the past couple of years, I was once told their initial customers were going to be large European banks. If so, those banks didn't really care what platform they were running on, they just wanted their existing code

Re: Machine or O/S (z/os) instruction to recognize a zpdt ?

2019-05-10 Thread Steve Smith
Gotta love an instruction that takes 22 pages to document. sas On Fri, May 10, 2019 at 12:58 PM John McKown wrote: > On Fri, May 10, 2019 at 11:39 AM Mike Stramba > wrote: > > > Is there a machine or z/os instruction / command to recognize "real > > iron" rather than a zpdt or "other"

Re: mainframe hacking "success stories"?

2019-05-10 Thread R.S.
W dniu 2019-05-07 o 19:48, Seymour J Metz pisze: 1964? What is the 7090, chopped liver? It is the same as FP6000 or ENIAC or any other dino computer. -- Radoslaw Skorupka Lodz, Poland == Jeśli nie jesteś adresatem tej

Re: mainframe hacking "success stories"?

2019-05-10 Thread R.S.
W dniu 2019-05-07 o 15:11, ITschak Mugzach pisze: Funny credit card story. Here in Israel, a company had all cc on an encrypted hd. The person used the desktop took the hd home, booted from the hd and copied all data. Then, from Thailand, he tried to blackmail his employee. What value

Re: mainframe hacking "success stories"?

2019-05-10 Thread Bill Johnson
No it isn’t and I provided 2 links to articles proving it. It’s security. Sent from Yahoo Mail for iPhone On Friday, May 10, 2019, 1:35 PM, R.S. wrote: W dniu 2019-05-06 o 22:18, Bill Johnson pisze: > It’s why banks stay on the mainframe. Security. No, it is legacy. -- Radoslaw Skorupka

Re: mainframe hacking "success stories"?

2019-05-10 Thread R.S.
W dniu 2019-05-06 o 22:22, ITschak Mugzach pisze: No. It has nothing to do with security. It is a lagend. Penetrated all my clients. The reason is convertion complexity, tco and simplicity. Security, in a nut shell is what your sysprog does. Only few security guys left to guide them. It's not

Re: mainframe hacking "success stories"?

2019-05-10 Thread R.S.
W dniu 2019-05-06 o 22:18, Bill Johnson pisze: It’s why banks stay on the mainframe. Security. No, it is legacy. -- Radoslaw Skorupka Lodz, Poland == Jeśli nie jesteś adresatem tej wiadomości: - powiadom nas o tym w

Re: Machine or O/S (z/os) instruction to recognize a zpdt ?

2019-05-10 Thread scott Ford
Yep John and Seymour are right on, we run z/PDT ...thats it On Fri, May 10, 2019 at 1:07 PM Seymour J Metz wrote: > STIDP > STFL > > > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > > From: IBM Mainframe Discussion List on behalf >

Re: Machine or O/S (z/os) instruction to recognize a zpdt ?

2019-05-10 Thread Seymour J Metz
STIDP STFL -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Mike Stramba Sent: Friday, May 10, 2019 12:38 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Machine or O/S (z/os) instruction to recognize

Re: Machine or O/S (z/os) instruction to recognize a zpdt ?

2019-05-10 Thread John McKown
On Fri, May 10, 2019 at 11:39 AM Mike Stramba wrote: > Is there a machine or z/os instruction / command to recognize "real > iron" rather than a zpdt or "other" emulation system? > > I realize that emulating the real hardware is the point, and that > maybe ??? there is no way the o/s can know

Re: Machine or O/S (z/os) instruction to recognize a zpdt ?

2019-05-10 Thread John McKown
On Fri, May 10, 2019 at 11:39 AM Mike Stramba wrote: > Is there a machine or z/os instruction / command to recognize "real > iron" rather than a zpdt or "other" emulation system? > > I realize that emulating the real hardware is the point, and that > maybe ??? there is no way the o/s can know

Machine or O/S (z/os) instruction to recognize a zpdt ?

2019-05-10 Thread Mike Stramba
Is there a machine or z/os instruction / command to recognize "real iron" rather than a zpdt or "other" emulation system? I realize that emulating the real hardware is the point, and that maybe ??? there is no way the o/s can know "for sure" ? .. Or maybe not ? ;) Mike

Re: Can backup mechanisms be used to steal RACF database? was Re: mainframe hacking "success stories"?

2019-05-10 Thread Seymour J Metz
Couldn't you grant the access only through PADS? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of ITschak Mugzach Sent: Friday, May 10, 2019 1:06 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Can

Re: Can backup mechanisms be used to steal RACF database? was Re: mainframe hacking "success stories"?

2019-05-10 Thread ITschak Mugzach
That's true password cracking can be complex. However, if you have a copy of the database you can find who are the users that have admin authority and concentrate cracking their passwords. ITschak בתאריך יום ו׳, 10 במאי 2019, 17:49, מאת Mark Jacobs ‏<

Re: Can backup mechanisms be used to steal RACF database? was Re: mainframe hacking "success stories"?

2019-05-10 Thread Mark Jacobs
Yes; The KDFAES algorithm is used to encrypt passwords and password phrases, but not OIDCARD data. It is designed to be resistant to offline attacks by incorporating the following properties: Each instance of a RACF® password injects randomly generated text into the encryption process. This

Re: Can backup mechanisms be used to steal RACF database? was Re: mainframe hacking "success stories"?

2019-05-10 Thread Dana Mitchell
On Fri, 10 May 2019 00:24:18 -0400, Bob Bridges wrote: >The lesson I take from this, and pass on to >my clients, is that read access to the security database is a huge exposure >and in most cases - that is, for most user IDs - completely unnecessary. > Doesn't the KDFAES password encryption

Re: z/OS SMTP Question - solved

2019-05-10 Thread Lionel B Dyck
XMITIP does have NLS support thanks to several individuals outside the US who provided it. The info is in the distributed PDS and while it may not be ideal doc it is a start. Lionel B. Dyck < Website: http://www.lbdsoftware.com "Worry more about your character than your reputation. Character

Re: LU name and RACF ID is SMF records

2019-05-10 Thread Wolfgang Fritz
If you don’t have smf119 records you can’t get information about lu‘s Bin unterwegs hab nur iPhone zur Verfügung. > Am 10.05.2019 um 09:54 schrieb Jorge Garcia : > > Thanks Wolfgang, but we need an information in the past and we didnt' collect > this records at this time > > Thanks > >

Re: LU name and RACF ID is SMF records

2019-05-10 Thread Jorge Garcia
Thanks Wolfgang, but we need an information in the past and we didnt' collect this records at this time Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the