Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-07-29 Thread Seymour J Metz
(Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Clark Morris Sent: Friday, July 26, 2019 10:27 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-07-26 Thread Clark Morris
[Default] On 7 Jun 2019 09:26:29 -0700, in bit.listserv.ibm-main sme...@gmu.edu (Seymour J Metz) wrote: >How many vulnerabilities have you seen that did not come down to people? Those >sysprogs are just the tip of the iceberg as far as configuration, enforcement, >management, policy, procedure,

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-13 Thread R.S.
W dniu 2019-06-12 o 18:29, Wayne Driscoll pisze: I was one of the developers for Deadbolt, and while we were able to get the product into a small number of installations as an "alpha" state release, the project was cancelled in early 2008. ... and I remember your name from that time ;-)

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-12 Thread Wayne Driscoll
- From: IBM Mainframe Discussion List On Behalf Of Charles Mills Sent: Tuesday, June 11, 2019 1:27 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls I have never found much barrier to entry with the IBM Business Partner process. The HUGE obstacle i

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-12 Thread R.S.
There were other ESMs. I'm aware of at least two. One was Deadbolt from JMenterprises (or so). One of Deadbolt developers is member of IBM-MAIN (maybe more, I know one). The second product was PIES. It was polish product. I don't think it was in use outside of Poland. -- Radoslaw Skorupka

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-11 Thread Charles Mills
ame/trends/ztalk/barry-schrager/ http://www.dignus.com/success_stories/JME/paper.html Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Tuesday, June 11, 2019 9:51 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Ju

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-11 Thread John McKown
On Tue, Jun 11, 2019 at 11:26 AM Bob Bridges wrote: > If that's what it stands for I should think those aren't just the big > three but the ~only~ three. At least, I've never heard of any others. > Which is odd, when you think about it; surely there's someone out there > wanting to break into

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-11 Thread Bob Bridges
If that's what it stands for I should think those aren't just the big three but the ~only~ three. At least, I've never heard of any others. Which is odd, when you think about it; surely there's someone out there wanting to break into the market? So says my capitalist assumptions. But

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-06-07 Thread Seymour J Metz
List on behalf of ITschak Mugzach Sent: Thursday, June 6, 2019 4:30 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL] Seymour, i have seen sysprogs in few sites that are convinced that you need read access to racf / tss db in order

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-06-07 Thread R.S.
And this is telling. What did you propose? New product to make the system less vulnerable or just suggest proper configuration? What's the solution for the case? Why almost all cases mentioned here are like that, that means some misconfiguration done by mistake or due to lack of knowledge? Why

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-06-06 Thread Jones, Phil
@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL] Unfortunately I have seen few. However I fixed it (that was part of my role there). And again it is not about paltform strength, it is about people. However this is the market for some companies. -- Radoslaw

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-06-06 Thread ITschak Mugzach
ussion List on behalf > of Jones, Phil <02379a6d81f2-dmarc-requ...@listserv.ua.edu> > Sent: Wednesday, June 5, 2019 9:29 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Just how secure are mainframes? | Trevor Eddolls > [SEC=UNOFFICIAL] > > At the risk of being con

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-06-06 Thread Seymour J Metz
From: IBM Mainframe Discussion List on behalf of Jones, Phil <02379a6d81f2-dmarc-requ...@listserv.ua.edu> Sent: Wednesday, June 5, 2019 9:29 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL] At the risk of being controvers

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-06-06 Thread R.S.
Unfortunately I have seen few. However I fixed it (that was part of my role there). And again it is not about paltform strength, it is about people. However this is the market for some companies. -- Radoslaw Skorupka Lodz, Poland W dniu 2019-06-06 o 03:33, Bill Johnson pisze: Agree 100%

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-06 Thread R.S.
So what? SVC is one of system components. Byte is set of bits. A knife can be used in the kitchen and for murder. -- Radoslaw Skorupka Lodz, Poland W dniu 2019-06-05 o 19:03, ITschak Mugzach pisze: Iebgener is the ibm recommanded utility to backup racf (called by irrut200). ITschak

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-06-05 Thread Bill Johnson
access to the RACF DB almost DESERVES to be hacked... Regards; Phil J. -Original Message- From: IBM Mainframe Discussion List On Behalf Of R.S. Sent: Thursday, 6 June 2019 2:41 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls W dniu 2019-06-02 o

Re: Just how secure are mainframes? | Trevor Eddolls [SEC=UNOFFICIAL]

2019-06-05 Thread Jones, Phil
@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls W dniu 2019-06-02 o 21:48, ITschak Mugzach pisze: > Sory to inform you: there are such SVCs available for download. I > think there is one on the cbttape . While such code is available for download it is not ava

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-05 Thread ITschak Mugzach
Iebgener is the ibm recommanded utility to backup racf (called by irrut200). ITschak בתאריך יום ד׳, 5 ביוני 2019, 19:41, מאת R.S. ‏< r.skoru...@bremultibank.com.pl>: > W dniu 2019-06-02 o 21:48, ITschak Mugzach pisze: > > Sory to inform you: there are such SVCs available for download. I think >

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-05 Thread R.S.
W dniu 2019-06-02 o 21:48, ITschak Mugzach pisze: Sory to inform you: there are such SVCs available for download. I think there is one on the cbttape . While such code is available for download it is not available for install. Otherwise we talk about mistakes in configurations => human

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-05 Thread R.S.
W dniu 2019-06-03 o 05:30, ITschak Mugzach pisze: I do? You must be joking. The thread is monopolized by one person. You know who. No, it's not. Maybe Bill wrote the most, but other people also contributed significantly, including you, Ray, Lenny, me, Shmuel, Clark, Tom and others. And

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-05 Thread Bill Johnson
Correct Sent from Yahoo Mail for iPhone On Wednesday, June 5, 2019, 12:25 PM, R.S. wrote: W dniu 2019-06-04 o 18:52, Clark Morris pisze: > [Default] On 4 Jun 2019 08:56:03 -0700, in bit.listserv.ibm-main > 0047540adefe-dmarc-requ...@listserv.ua.edu (Bill Johnson) wrote: > > >From the

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-05 Thread R.S.
W dniu 2019-06-04 o 18:52, Clark Morris pisze: [Default] On 4 Jun 2019 08:56:03 -0700, in bit.listserv.ibm-main 0047540adefe-dmarc-requ...@listserv.ua.edu (Bill Johnson) wrote: >From the you can't make this up department. Mr. Marchant agrees with me.

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-05 Thread R.S.
Regarding "you have never been hacked during 40 years". Disclaimer: this is not my case, I only analyze it from logic point of view. Indeed Bill cannot be 100% sure ha had never been hacked. Just because maybe he was hacked but the breach was not disclosed. However no one can be 100% sure of

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-05 Thread R.S.
Multics... MVS  and CA products 30 years ago... I strongly believe that prehistory is not good argument for discussion about contemporary systems. -- Radoslaw Skorupka Lodz, Poland W dniu 2019-06-03 o 20:28, Clark Morris pisze: [Default] On 3 Jun 2019 09:41:54 -0700, in

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-05 Thread R.S.
W dniu 2019-05-29 o 21:38, Savor, Thomas (Alpharetta) pisze: In securing Mainframe: One thing I've noticed over the years is how a Company will "hide" their Mainframe hardware. The Hardware for me now is in a unmarked Building that looks like a bunker (I'm told). Pretty bad that the

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Tom Marchant
On Tue, 4 Jun 2019 13:52:27 -0300, Clark Morris wrote: >Is there a mechanism for >third party vendors that provide software that runs APF authorized to >be somehow included in the statement of integrity or have recognized >equivalents? Other vendors are free to issue their own statements of

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Seymour J Metz
Agile: doing the wrong thing quickly -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of ITschak Mugzach Sent: Monday, June 3, 2019 2:59 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
Bad link https://www.computerworld.com/article/2487425/target-breach-happened-because-of-a-basic-network-segmentation-error.html On Tuesday, June 4, 2019, 12:53:11 PM EDT, Clark Morris wrote: [Default] On 4 Jun 2019 08:56:03 -0700, in bit.listserv.ibm-main

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
How target was hacked. https://www.computerworld.com/article/2487425/target-breach-happened-because-of-a-basic-network-segmentation-error.html   Sent from Yahoo Mail for iPhone On Tuesday, June 4, 2019, 12:52 PM, Clark Morris wrote: [Default] On 4 Jun 2019 08:56:03 -0700, in

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Seymour J Metz
From: IBM Mainframe Discussion List on behalf of Clark Morris Sent: Tuesday, June 4, 2019 12:52 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls [Default] On 4 Jun 2019 08:56:03 -0700, in bit.listserv.ibm-main 0047540adefe-dmarc-requ

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
Not according to Target or any write ups I’ve read on it. Sent from Yahoo Mail for iPhone On Tuesday, June 4, 2019, 12:52 PM, Clark Morris wrote: [Default] On 4 Jun 2019 08:56:03 -0700, in bit.listserv.ibm-main 0047540adefe-dmarc-requ...@listserv.ua.edu (Bill Johnson) wrote: >From the

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
RACF comes with the OS. You turn it on and pay for it ONLY if you don’t have ACF2 or TSS. And RACF has approx 80% market share. Sent from Yahoo Mail for iPhone On Tuesday, June 4, 2019, 12:52 PM, Clark Morris wrote: [Default] On 4 Jun 2019 08:56:03 -0700, in bit.listserv.ibm-main

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Clark Morris
[Default] On 4 Jun 2019 08:56:03 -0700, in bit.listserv.ibm-main 0047540adefe-dmarc-requ...@listserv.ua.edu (Bill Johnson) wrote: >From the you can’t make this up department. Mr. Marchant agrees with me. > >https://www.compuware.com/proving-z13-modern/ > Considering that he is writing for a

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Seymour J Metz
_ > From: IBM Mainframe Discussion List on behalf of > Clark Morris > Sent: Sunday, June 2, 2019 9:57 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Just how secure are mainframes? | Trevor Eddolls > > [Default] On 2 Jun 2019 14:4

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Seymour J Metz
equ...@listserv.ua.edu> Sent: Tuesday, June 4, 2019 11:55 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls >From the you can’t make this up department. Mr. Marchant agrees with me. https://secure-web.

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
move this on PLEASE ! Carmen Vitullo - Original Message - From: "Bill Johnson" <0047540adefe-dmarc-requ...@listserv.ua.edu> To: IBM-MAIN@LISTSERV.UA.EDU Sent: Tuesday, June 4, 2019 10:45:31 AM Subject: Re: Just how secure are mainframes? | Trevor Eddolls You

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
>From the you can’t make this up department. Mr. Marchant agrees with me. https://www.compuware.com/proving-z13-modern/   Talk of “modernization” of mainframe systems is often code for redesigning mainframe-based applications and implementing them to run on Windows, or less frequently, on

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Carmen Vitullo
00047540adefe-dmarc-requ...@listserv.ua.edu> To: IBM-MAIN@LISTSERV.UA.EDU Sent: Tuesday, June 4, 2019 10:45:31 AM Subject: Re: Just how secure are mainframes? | Trevor Eddolls You have posted more to this thread than anyone else. False You have claimed that security is the main re

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
You have posted more to this thread than anyone else. False  You have claimed that security is the main reason people stay on the  mainframe, and posted a few articles that do not say what you claimed  they say. False, they all stated flatly security was a top 3 reason for staying on the

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Tom Marchant
On Tue, 4 Jun 2019 00:01:01 +, Bill Johnson wrote: >noise and plenty of it. PKB. You have posted more to this thread than anyone else. You have claimed that security is the main reason people stay on the mainframe, and posted a few articles that do not say what you claimed they say. You

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
ware -Original Message- From: IBM Mainframe Discussion List On Behalf Of Bill Johnson Sent: Tuesday, June 4, 2019 2:09 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls It’s a little more than coincidence that 3 of the most vociferous posters who

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Rob Scott
ments would be naive. Rob Scott Rocket Software -Original Message- From: IBM Mainframe Discussion List On Behalf Of Bill Johnson Sent: Tuesday, June 4, 2019 2:09 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls It’s a little more tha

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Lennie Dymoke-Bradshaw
Just maybe, they are the ones who understand the problems, as they spend time focussed on them. Lennie Dymoke-Bradshaw | Security Lead | RSM Partners Ltd   Web:  www.rsmpartners.com ‘Dance like no one is watching. Encrypt like everyone is.’ -Original Message- From: IBM

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
It’s a little more than coincidence that 3 of the most vociferous posters who claim the mainframe is not secure, all sell mainframe security services. Sent from Yahoo Mail for iPhone On Tuesday, June 4, 2019, 8:59 AM, ITschak Mugzach wrote: Lennie, You are inviting 'he tries to sell his

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Lennie Dymoke-Bradshaw
Bill, So you have not seen these things. Others have. Please accept their word for this. If you were as rich as Warren Buffet then you could afford to employ others to work out if you need a haircut. Maybe you could teach yourself those skills. Your logic takes us down a path of only taking

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread ITschak Mugzach
Lennie, You are inviting 'he tries to sell his product / services' ... ITschak On Tue, Jun 4, 2019 at 3:45 PM Lennie Dymoke-Bradshaw < lenni...@rsmpartners.com> wrote: > Bill, > > It is very difficult to prove the negative. Hence, your claim that your > system has never been hacked is

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
In 40 years, I’ve never seen any company I’ve worked for have their mainframe hacked or compromised. Including a bank and multiple insurance companies. Plus, I was in positions to know. I have seen numerous hacks and compromises of non mainframe platforms at those companies. As Warren Buffett

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Lennie Dymoke-Bradshaw
Bill, It is very difficult to prove the negative. Hence, your claim that your system has never been hacked is difficult to prove. I think it is possible that your system has been "hacked" and your data has been exfiltrated. There is no reason for the hacker to call attention to that fact that

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
Quite different. The sell the security as part of the OS. They don’t then bash the security (their own product) and try to sell you additional products. IBM actually tells you how great mainframe security is and use it as a selling point to industries where security is paramount. Sent from

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Lou Losee
So does IBM Lou On Tue, Jun 4, 2019 at 6:38 AM Bill Johnson < 0047540adefe-dmarc-requ...@listserv.ua.edu> wrote: > How do you demonstrate something that hasn’t happened? LOL > I see your company sells security services too. > > > Sent from Yahoo Mail for iPhone > > > On Tuesday, June 4,

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Bill Johnson
How do you demonstrate something that hasn’t happened? LOL  I see your company sells security services too. Sent from Yahoo Mail for iPhone On Tuesday, June 4, 2019, 5:59 AM, Lennie Dymoke-Bradshaw wrote: How do you demonstrate that you have never been hacked? Lennie Dymoke-Bradshaw | 

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Lennie Dymoke-Bradshaw
How do you demonstrate that you have never been hacked? Lennie Dymoke-Bradshaw | Security Lead | RSM Partners Ltd   Web:  www.rsmpartners.com ‘Dance like no one is watching. Encrypt like everyone is.’ -Original Message- From: IBM Mainframe Discussion List On Behalf Of Bill

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Richards, Robert B.
-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls >>>> "40 years on numerous mainframes at more than a dozen companies and we’ve >>>> never been hacked and never had any need for penetration testing." ...said King Priam to Cassandr

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Rob Scott
Bill Johnson Sent: Tuesday, June 4, 2019 1:04 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls 40 years on numerous mainframes at more than a dozen companies and we’ve never been hacked and never had any need for penetration testing. Sent from Yahoo M

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-04 Thread Richards, Robert B.
*PLONK* -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Bill Johnson Sent: Monday, June 03, 2019 8:01 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls Lol, yeah, because the more someone

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Bill Johnson
running z/OS? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Clark Morris Sent: Sunday, June 2, 2019 9:57 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Bill Johnson
40 years on numerous mainframes at more than a dozen companies and we’ve never been hacked and never had any need for penetration testing. Sent from Yahoo Mail for iPhone On Monday, June 3, 2019, 11:54 AM, Clark Morris wrote: [Default] On 2 Jun 2019 19:11:41 -0700, in bit.listserv.ibm-main

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Bill Johnson
lating to security, ACF2, Pen testing, etc. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Bill Johnson Sent: Sunday, June 02, 2019 10:11 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls He’s s

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Mike Schwab
___ > From: IBM Mainframe Discussion List on behalf of > Clark Morris > Sent: Sunday, June 2, 2019 9:57 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Just how secure are mainframes? | Trevor Eddolls > > [Default] On 2 Jun 2019 14:46:41 -0700, in bit.listse

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread ITschak Mugzach
Have no idea about MultiCS, but can comment on 2 & 3 as I've seen many installations here and in EU. 1. The best way is to check the product after it was installed by the sysprog. I noticed that some of them skip installation steps. When it comes to products that depend on USS, it can be

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Schuffenhauer, Mark
else." "Or else what" "Bad employee, bad employee." -Original Message- From: IBM Mainframe Discussion List On Behalf Of Seymour J Metz Sent: Monday, June 03, 2019 1:37 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Seymour J Metz
.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Clark Morris Sent: Monday, June 3, 2019 2:28 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls [Default] On 3 Jun 2019 09:41

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Clark Morris
[Default] On 3 Jun 2019 09:41:54 -0700, in bit.listserv.ibm-main sme...@gmu.edu (Seymour J Metz) wrote: >This whole thread has consistently confused several very different issues: I agree and have questions in each of the areas. > > 1. How secure is z/OS itself? I recall reading that Multics

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Seymour J Metz
<0047540adefe-dmarc-requ...@listserv.ua.edu> Sent: Sunday, June 2, 2019 5:46 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls He’s trying to sell his company’s security services. Something I thought was not allowed on this list. Sent from

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Seymour J Metz
From: IBM Mainframe Discussion List on behalf of Clark Morris Sent: Sunday, June 2, 2019 9:57 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls [Default] On 2 Jun 2019 14:46:41 -0700, in bit.listserv.ibm-main 0047540adefe-dmarc-requ

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Clark Morris
[Default] On 2 Jun 2019 19:11:41 -0700, in bit.listserv.ibm-main 0047540adefe-dmarc-requ...@listserv.ua.edu (Bill Johnson) wrote: >He’s selling plain and simple. So is Mugzak. Some laboratory bs that he will >even show you in application code. Then no doubt analyze your application code

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-03 Thread Richards, Robert B.
To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls He’s selling plain and simple. So is Mugzak. Some laboratory bs that he will even show you in application code. Then no doubt analyze your application code for a small (large) fee. Nobody is saying

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread ITschak Mugzach
us? > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > > From: IBM Mainframe Discussion List on behalf > of Ray Overby > Sent: Friday, May 31, 2019 7:19 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Just how secure are mainframes? | Trevor E

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread Bill Johnson
He’s selling plain and simple. So is Mugzak. Some laboratory bs that he will even show you in application code. Then no doubt analyze your application code for a small (large) fee. Nobody is saying the mainframe is fool proof. But, it is inherently (by design) more secure than any other

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread Clark Morris
[Default] On 2 Jun 2019 14:46:41 -0700, in bit.listserv.ibm-main 0047540adefe-dmarc-requ...@listserv.ua.edu (Bill Johnson) wrote: >He’s trying to sell his company’s security services. Something I thought was >not allowed on this list. > Whether or not he is selling something and I don't read

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread Bill Johnson
mour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Ray Overby Sent: Friday, May 31, 2019 7:19 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls In response to "Sinc

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread Seymour J Metz
M-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls In response to "Since when does MODESET turn on the JSCBAUTH bit? Just how do you propose that IBM prevent key zero code from setting it? Why do think that turning on JSCBAUTH lets key zero code do anything that it couldn't

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread Seymour J Metz
Mainframe Discussion List on behalf of ITschak Mugzach Sent: Sunday, June 2, 2019 3:48 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls Sory to inform you: there are such SVCs available for download. I think there is one on the cbttape . בתאריך יום א׳

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread ITschak Mugzach
; thoroughly. > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > > > From: IBM Mainframe Discussion List on behalf > of ITschak Mugzach > Sent: Saturday, June 1, 2019 2:42 AM > To: IBM-MAIN@LISTSERV.UA.EDU >

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread Seymour J Metz
1, 2019 2:42 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls We look for such SVC in our STIG compliance product IronSphere. We advise adding ESM control in facility class to control who can use it in case this SVC is a must. ITschak בתאריך שבת, 1 ביו

Re: Just how secure are mainframes? | Trevor Eddolls

2019-06-01 Thread ITschak Mugzach
gt; anyways? If the installation doesn't control what goes into its authorized > libraries then the vulnerability is in management, not in the platform. > > > > > > > > -- > > Shmuel (Seymour J.) Metz > > http://mason.gmu.edu/~smetz3 > > > > __

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-31 Thread Ray Overby
ason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Jesse 1 Robinson Sent: Thursday, May 30, 2019 5:48 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls It must be Friday somewhere. I put 'against stupidity' into Googl

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-31 Thread Seymour J Metz
_ From: IBM Mainframe Discussion List on behalf of Jesse 1 Robinson Sent: Thursday, May 30, 2019 5:48 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls It must be Friday somewhere. I put 'against stupidity' into Google. Schiller's exact quote popped

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Jesse 1 Robinson
...@sce.com -Original Message- From: IBM Mainframe Discussion List On Behalf Of Ray Overby Sent: Thursday, May 30, 2019 11:45 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: Fwd: Just how secure are mainframes? | Trevor Eddolls In response to "Please note that an unprivi

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Savor, Thomas (Alpharetta)
o:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Schuffenhauer, Mark Sent: Wednesday, May 29, 2019 2:23 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls ⚠ EXTERNAL MESSAGE – Think Before You Click My sales favorite was knowing key functionality is vaporware,

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Carmen Vitullo
! . Carmen Vitullo - Original Message - From: "ITschak Mugzach" To: IBM-MAIN@LISTSERV.UA.EDU Sent: Wednesday, May 29, 2019 8:01:48 AM Subject: Re: Just how secure are mainframes? | Trevor Eddolls Carmen, t think you are mixing event audit (siem product like qradar) with st

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread ITschak Mugzach
eam some > insight as to what security issues we all have in the enterprise, Winders, > AIX, Linux and Z. > > > > Carmen Vitullo > > - Original Message - > > From: "ITschak Mugzach" > To: IBM-MAIN@LISTSERV.UA.EDU > Sent: Wednesday, May 29, 201

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Carmen Vitullo
issues we all have in the enterprise, Winders, AIX, Linux and Z. Carmen Vitullo - Original Message - From: "ITschak Mugzach" To: IBM-MAIN@LISTSERV.UA.EDU Sent: Wednesday, May 29, 2019 7:26:10 AM Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls Where i

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Seymour J Metz
IBM Mainframe Discussion List on behalf of Paul Gilmartin <000433f07816-dmarc-requ...@listserv.ua.edu> Sent: Tuesday, May 28, 2019 5:00 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Just how secure are mainframes? | Trevor Eddolls On Tue, 28 May 2019 20:41:50 +, Seymour J Metz wrot

Re: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Paul Gilmartin
On Tue, 28 May 2019 20:41:50 +, Seymour J Metz wrote: >What if you have a business need to make files available to the general >public? Do you really believe that the web infrastructure is any more secure >than FTP, or even as secure? > There are tools to enforce user authentication.