Re: Insecure security -- When broken how far it may reach.....

2024-02-16 Thread Radoslaw Skorupka
W dniu 15.02.2024 o 18:55, Dave Beagle pisze: [...] Let me ask, how many of you use password as the password on your HMC? I know most of the shops I worked at did. Not me. I always change both passwords and userids. Even for IBM (SERVICE user). I also keep pre-defined users with no access

Re: Insecure security -- When broken how far it may reach.....

2024-02-15 Thread Dave Beagle
; > News - Template Redesign 15 Feb (Split test)_content=E%26T News - > > Members_medium=email_source=Adestra_term=865089 > > > > Sent from Outlook for Androidhttps://aka.ms/AAb9ysg > > > > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU

Re: Insecure security - was SDSF PS Command column

2024-02-15 Thread Joel C. Ewing
The nature of the LastPass hack would not have been a serious problem to those using a good enough master passwords for LastPass access.  If concerned that your database might have been stolen and you didn't trust the goodness of your encryption password, you could change to a better master

Re: Insecure security -- When broken how far it may reach.....

2024-02-15 Thread rpinion865
News - Template Redesign 15 Feb (Split test)_content=E%26T News - > > Members_medium=email_source=Adestra_term=865089 > > > > Sent from Outlook for Androidhttps://aka.ms/AAb9ysg > > > > From: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.

Re: Insecure security -- When broken how far it may reach.....

2024-02-15 Thread Steve Thompson
stserv.ua.edu> Sent: Thursday, February 15, 2024 3:25:18 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Insecure security - was SDSF PS Command column Hi Bill, I can relate to your suspicions about password managers. Not to long ago Lastpass found out that they have been hacked, which must have been a b

Re: Insecure security

2024-02-15 Thread P H
behalf of Jack Zukt <059cd493dd41-dmarc-requ...@listserv.ua.edu> Sent: Thursday, February 15, 2024 3:25:18 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Insecure security - was SDSF PS Command column Hi Bill, I can relate to your suspicions about password managers. Not to long ago Lastpa

Re: Insecure security - was SDSF PS Command column

2024-02-15 Thread Jack Zukt
Hi Bill, I can relate to your suspicions about password managers. Not to long ago Lastpass found out that they have been hacked, which must have been a big problem for its end users (which, fortunately I am not). On the other hand, I have way too many passwords to be manageable without a password

Re: Insecure security - was SDSF PS Command column

2024-02-15 Thread billogden
My trivial comments: 1. Using a password manager seems to be putting all our eggs in one basket. What if that basket fails? Is it secure? Can I always access it? If we need to make a particular password available to a "trusted" friend (at some indefinite time), how should we manage that. 2. I

Re: Insecure security - was SDSF PS Command column

2024-02-15 Thread Radoslaw Skorupka
Webcam when they open the binder to enter the password. 1. Very unlikely. 2. Much more effort for hacker. 3. Not everyone has a camera. 4. Small chance the camera will show binder content - it is like card game (poker, bridge) - you see figures, but a guy in front of you sees other side of

Re: Insecure security - was SDSF PS Command column

2024-02-15 Thread Jack Zukt
Hello all, That is an interesting point. However how many of you are still able to manage your passwords withiut using a password manager? I gave up many years ago. Regards Jack On Wed, Feb 14, 2024, 15:13 Pommier, Rex wrote: > Steve, > > You make a good point about making security so onerous

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Paul Gilmartin
On Thu, 15 Feb 2024 01:55:26 +, Seymour J Metz wrote: >The combination of a non-display entry field and blocking paste is devasting >to those with awkward keyboards or coordination issues. > My eyesight is bad enough that I rely heavily on spellcheck, copy/paste and audio I/O. Disability

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Steve Thompson
I have disabled the camera in my laptop, and put painter's tape over it (because we found out some years ago when I was an IBM employee, that there was a way to have your camera turned on, and the indicator light to not light up). So in Teams (and related), all you see for me is a blue cloud

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Tom Brennan
When I'm home my laptop is on a shelf under my desk, connected to a KVM switch so I can swap to it using my desktop keyboard and screen. I had standard black electrical tape covering the camera and on a meeting I expected to see black for my image, but I saw legs (in pants). I'm guessing the

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Seymour J Metz
From: IBM Mainframe Discussion List on behalf of Joel C. Ewing Sent: Wednesday, February 14, 2024 6:45 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Insecure security - was SDSF PS Command column It obviously depends on what websites you visit, but there is only

Re: [EXTERNAL] Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Steve Thompson
Subject: [EXTERNAL] Re: Insecure security - was SDSF PS Command column Won't work when there is electical tape across the camera lens. Webcam when they open the binder to enter the password. -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Joel C. Ewing
It obviously depends on what websites you visit, but there is only one website of the many I use that completely prevents paste of a password by all methods.   Most of the websites I've encountered that prevent a mouse right-click and selection of "Paste" for login fields will still allow the

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Paul Gilmartin
On Wed, 14 Feb 2024 17:28:53 -0500, Tony Harminc wrote: > >But I've encountered sites that prohibit OS desktop Paste into password >> field. > >Plenty of those. And some that allow a paste into the email field, but not >into the "verify email" field. That one just reinforces the feeling that >the

Re: [EXTERNAL] Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Pommier, Rex
Mine's a gum wrapper.  -Original Message- From: IBM Mainframe Discussion List On Behalf Of Michael Oujesky Sent: Wednesday, February 14, 2024 4:25 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: [EXTERNAL] Re: Insecure security - was SDSF PS Command column > >Won't wor

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Tony Harminc
On Wed, 14 Feb 2024 at 16:17, Paul Gilmartin < 042bfe9c879d-dmarc-requ...@listserv.ua.edu> wrote: But I've encountered sites that prohibit OS desktop Paste into password > field. > Plenty of those. And some that allow a paste into the email field, but not into the "verify email" field. That

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Michael Oujesky
Won't work when there is electical tape across the camera lens. Webcam when they open the binder to enter the password. -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? -- For

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Paul Gilmartin
On Wed, 14 Feb 2024 21:18:28 +0100, Radoslaw Skorupka wrote: > >Regarding passwords - IMHO private notebook/organizer is much better >than saving passwords in web browser (do you remember password >stealers?) or other "nice and automatic" methods. Even IT illiterates >know how to protect paper

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Mike Schwab
On Wed, Feb 14, 2024 at 2:19 PM Radoslaw Skorupka < 0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote: > Last, but not least: no hacker know method to read paper notebook. > > -- > Radoslaw Skorupka > Lodz, Poland > Webcam when they open the binder to enter the password. -- Mike A

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Radoslaw Skorupka
W dniu 14.02.2024 o 19:32, Lennie Dymoke-Bradshaw pisze: I would hope they are instead using a password generator and password safe such as Keepass, Passwordsafe, Lastpass or Bitwarden. Writing things down is not so good. Welcome to the world of zero-trust. Lennie Well, I frequently advice

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Lennie Dymoke-Bradshaw
, Rex Sent: 14 February 2024 15:13 To: IBM-MAIN@LISTSERV.UA.EDU Subject: Insecure security - was SDSF PS Command column Steve, You make a good point about making security so onerous one can't use it. At my employer, we use a third party cloud application (unnamed to conceal the perpetrator

Re: [EXTERNAL] Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Pommier, Rex
: [EXTERNAL] Re: Insecure security - was SDSF PS Command column This is what password managers were created for. I use Bitwarden, and can't recommend them highly enough. On Wed, Feb 14, 2024 at 9:13 AM Pommier, Rex wrote: > You make a good point about making security so onerous one can't

Re: Insecure security - was SDSF PS Command column

2024-02-14 Thread Jay Maynard
This is what password managers were created for. I use Bitwarden, and can't recommend them highly enough. On Wed, Feb 14, 2024 at 9:13 AM Pommier, Rex wrote: > You make a good point about making security so onerous one can't use it. > At my employer, we use a third party cloud application

Insecure security - was SDSF PS Command column

2024-02-14 Thread Pommier, Rex
Steve, You make a good point about making security so onerous one can't use it. At my employer, we use a third party cloud application (unnamed to conceal the perpetrator) that doesn't use multi-factor yet. However their password to get in has to be a minimum of 16 characters. No problem,