Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-06-02 Thread Seymour J Metz
ehalf of ITschak Mugzach Sent: Saturday, June 1, 2019 2:46 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls Not sure if it is still an issue, but SDSF SVC could be used to switch from semmi authorized to superviser mode. ITschak בתאריך שבת, 1 ביוני 20

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-06-01 Thread ITschak Mugzach
installation, not in z/OS. > > > > Now, when *IBM* fails to follow the statement of integrity, that *is* a > z/OS vulnerability, but when is the last time that IBM refused to correct > such an error when it was reported? > > > > -- > > Shmuel (Seymour J.) Metz > > http://mason.gm

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-31 Thread Ray Overby
ay Overby Sent: Thursday, May 30, 2019 2:44 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls In response to "Please note that an unprivileged application can still have a dangerous back door that compromises, e.g., privacy, by giving a

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-31 Thread Ray Overby
d? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Wayne Driscoll Sent: Thursday, May 30, 2019 5:20 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls If the trap door i

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-31 Thread Seymour J Metz
Mainframe Discussion List on behalf of Ray Overby Sent: Thursday, May 30, 2019 2:44 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls In response to "Please note that an unprivileged application can still have a dangerous back door that compro

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-31 Thread Seymour J Metz
of Wayne Driscoll Sent: Thursday, May 30, 2019 5:20 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls If the trap door is in an APF authorized library, then by convention it's part of the operating system, and would be considered a platform issue

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Wayne Driscoll
opinions are strictly my own. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Seymour J Metz Sent: Wednesday, May 29, 2019 2:58 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls > A single TRAP DOOR code vulnerabil

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Ray Overby
ersonnel and 3rd party providing OS changes and other privileged code. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Ray Overby Sent: Thursday, May 30, 2019 7:28 AM To: IBM-MAIN@LISTSERV.UA.

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Tom Brennan
Thanks! On 5/30/2019 9:20 AM, Ray Overby wrote: ESM - External Security Manager. I use ESM when I am talking about ACF2, RACF, and TSS. On 5/30/2019 10:20 AM, Tom Brennan wrote: I've seen the acronym ESM a few times in this thread.  I'll assume that means "Enterprise Security Management",

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Ray Overby
ESM - External Security Manager. I use ESM when I am talking about ACF2, RACF, and TSS. On 5/30/2019 10:20 AM, Tom Brennan wrote: I've seen the acronym ESM a few times in this thread.  I'll assume that means "Enterprise Security Management", and I'll guess it refers to security processes

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Ray Overby
From: IBM Mainframe Discussion List on behalf of Lou Losee Sent: Thursday, May 30, 2019 11:42 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls Just because it has not been brought up and I think

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Seymour J Metz
IBM Mainframe Discussion List on behalf of Lou Losee Sent: Thursday, May 30, 2019 11:42 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls Just because it has not been brought up and I think it is pertinent to this discussion. It is obvious that IBM

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Lou Losee
> http://mason.gmu.edu/~smetz3 > > > From: IBM Mainframe Discussion List on behalf > of R.S. > Sent: Thursday, May 30, 2019 7:01 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls > > As Shmuel said an application

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Seymour J Metz
: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls As Shmuel said an application with a trap door is an application vulnerability. Ideed, IF you know such trap door, you know z/OS vulnerability, which proves the platform is not immune. Is it as vulnerable as Windows? No, because it's still

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Seymour J Metz
___ From: IBM Mainframe Discussion List on behalf of Ray Overby Sent: Thursday, May 30, 2019 7:28 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls In response to "An application with a trap door is an application vulnerability. If there

Re: [External] Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Pommier, Rex
ERV.UA.EDU Subject: [External] Re: Fwd: Just how secure are mainframes? | Trevor Eddolls I've seen the acronym ESM a few times in this thread. I'll assume that means "Enterprise Security Management", and I'll guess it refers to security processes (not RACF), such as assigning userid's, mak

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Tom Brennan
I've seen the acronym ESM a few times in this thread. I'll assume that means "Enterprise Security Management", and I'll guess it refers to security processes (not RACF), such as assigning userid's, making sure people have just the access they need, periodic audits, etc. Am I even close? On

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Bill Johnson
Nobody said it was immune and you sell z security which is quite a conflict of interest. Sent from Yahoo Mail for iPhone On Thursday, May 30, 2019, 9:17 AM, Ray Overby wrote: In response to "Ideed, IF you know such trap door, you know z/OS vulnerability, which proves the platform is not

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Ray Overby
In response to "Ideed, IF you know such trap door, you know z/OS vulnerability, which proves the platform is not immune. Is it as vulnerable as Windows? No, because it's still not binary, some systems are still more secure than others." In my opinion (I am biased) z/OS is the most secure-able

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread John McKown
On Wed, May 29, 2019 at 1:23 PM Schuffenhauer, Mark wrote: > My sales favorite was knowing key functionality is vaporware, talking up > everything the software would do some day. Then being horrified when you > realize the 'decision makers' are eating it up. None of them ends up in > hell when

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread Ray Overby
ason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Ray Overby Sent: Wednesday, May 29, 2019 11:11 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls In response to "Mistakes, lack of time, lack of control, lack of skills

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-30 Thread R.S.
As Shmuel said an application with a trap door is an application vulnerability. Ideed, IF you know such trap door, you know z/OS vulnerability, which proves the platform is not immune. Is it as vulnerable as Windows? No, because it's still not binary, some systems are still more secure than

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Seymour J Metz
Discussion List on behalf of Farley, Peter x23353 Sent: Tuesday, May 28, 2019 7:31 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls Thank you for the explanation. I can see that proxy access to other userid's would need tight control, like

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Seymour J Metz
: Fwd: Just how secure are mainframes? | Trevor Eddolls Radoslaw, * I find your posts informative and helpful. * I think your English is very understandable * I respect your expertise My initial post was an attempt to get a stalled discussion moving in a more positive direction. I don't

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Seymour J Metz
ange to address a mainframe platform weakness Partially. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Ray Overby Sent: Wednesday, May 29, 2019 11:11 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Schuffenhauer, Mark
AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls In response to "Mistakes, lack of time, lack of control, lack of skills. Not a platform weakness." comment: The mainframe platform, z/OS, and ESM's all rely on integrity to function. A s

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Ray Overby
In response to "Mistakes, lack of time, lack of control, lack of skills. Not a platform weakness." comment: The mainframe platform, z/OS, and ESM's all rely on integrity to function. A single TRAP DOOR code vulnerability pierces the veil of integrity and can be used to compromise the

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Ray Overby
Radoslaw, * I find your posts informative and helpful. * I think your English is very understandable * I respect your expertise My initial post was an attempt to get a stalled discussion moving in a more positive direction. I don't normally post but I felt that mainframe vulnerability

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread ITschak Mugzach
t; > I'll entertain one more response from you before I place you in the > virtual Anton Britz lookalike folder. Make it a good one. > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Bill Johnson > Sent: Tu

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Bill Johnson
.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls I posted 3-4 links from varying sources all saying the same thing. Banks, insurance, big retail all use the mainframe for approximately 3 major reasons, one of which is security. Then Ray wants to show me some contr

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Richards, Robert B.
Of R.S. Sent: Wednesday, May 29, 2019 6:29 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls W dniu 2019-05-29 o 12:09, Richards, Robert B. pisze: >> I'm still sure thank banks are less susceptible to break in than regular >>

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread ITschak Mugzach
I didn't offer anything. Read the thread from begining. I was the first to confirm the PEOPLE is the main issue. Yes, I don't think clients buy mainframes because they are more secure, i don't know if there are new clients for mainframes in the last few years. Most, if not all, mainframe clients

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread R.S.
W dniu 2019-05-29 o 12:09, Richards, Robert B. pisze: I'm still sure thank banks are less susceptible to break in than regular house Yeah, experience is a tough task master, isn't it? Who is task master? Do you try to insult me? Just because you disagree with my opinions? -- Radoslaw Skorupka

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread R.S.
That's classical FUD. Frightening people. "if an exploit", "if job reads you RACF db", "unintended consequences". What exactly hacking scenario can provide RACF db to the hacker? Yes, I saw APF libraries with UACC(ALTER), UID(0) as standard TSO user attribute, even UPDATE to RACF db. But it's

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread ITschak Mugzach
Radoslav, I just tried to demonstrate the fact that ibm sometime don't confirm the risk before it fix it and many of the industry ayyack methodd are also posible with new technologies broght to mainframe. While i accept this strategy from client security point of view, you can't relay on that

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Richards, Robert B.
AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls W dniu 2019-05-28 o 19:01, ITschak Mugzach pisze: > Radoslav, > > "Claiming that z/OS has flaws as other systems is the same as claiming bank > is vulnerable to burglars as houses&quo

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread R.S.
W dniu 2019-05-28 o 19:01, ITschak Mugzach pisze: Radoslav, "Claiming that z/OS has flaws as other systems is the same as claiming bank is vulnerable to burglars as houses" I am sure you've heard of mettdown an Spectre. IBM CPU have same issues as any other cpu in market -( ITschak, I'm sure

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-29 Thread Richards, Robert B.
ll Johnson Sent: Tuesday, May 28, 2019 8:26 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls I posted 3-4 links from varying sources all saying the same thing. Banks, insurance, big retail all use the mainframe for approximately 3 major reasons, on

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
I posted 3-4 links from varying sources all saying the same thing. Banks, insurance, big retail all use the mainframe for approximately 3 major reasons, one of which is security. Then Ray wants to show me some controlled experiment that is nothing but a lab event that he can’t show to have ever

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
I backed them up weeks ago. Try to catch up. Sent from Yahoo Mail for iPhone On Tuesday, May 28, 2019, 6:22 PM, zMan wrote: So...you make statements and don't back them up, and when offered coutner-examples, refuse to view them? Plonk. On Tue, May 28, 2019 at 1:30 PM Bill Johnson <

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Farley, Peter x23353
List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Seymour J Metz Sent: Tuesday, May 28, 2019 5:51 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls FTP JES access relies on the credentials of the userid under which the FTP server is running. Under

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread zMan
So...you make statements and don't back them up, and when offered coutner-examples, refuse to view them? Plonk. On Tue, May 28, 2019 at 1:30 PM Bill Johnson < 0047540adefe-dmarc-requ...@listserv.ua.edu> wrote: > Demos remind me of this joke. > http://www.jokes.net/heavenandhell.htm > I’ve

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Seymour J Metz
(Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Farley, Peter x23353 Sent: Tuesday, May 28, 2019 4:57 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Farley, Peter x23353
. Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Seymour J Metz Sent: Tuesday, May 28, 2019 4:42 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls What if you have a business need

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Seymour J Metz
Mainframe Discussion List on behalf of Farley, Peter x23353 Sent: Tuesday, May 28, 2019 3:57 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls But again, if anonymous FTP is prohibited (which I can easily see is in general a good idea for z/OS systems

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Seymour J Metz
(Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of ITschak Mugzach Sent: Tuesday, May 28, 2019 3:30 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls Ftp in general

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Farley, Peter x23353
MAIN@LISTSERV.UA.EDU] On Behalf Of Ray Overby Sent: Tuesday, May 28, 2019 2:41 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls Peter - That is a good question. I think there may be several ways to explain this: * When I explain code vulnerabiliti

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread ITschak Mugzach
Ftp in general is a bad idea. Data should have a single, well protected copy. ibm moves to REST APIs (zosmf, but can be used natively). Again, they need to be protected. ITschak בתאריך יום ג׳, 28 במאי 2019, 21:51, מאת John McKown ‏< john.archie.mck...@gmail.com>: > On Tue, May 28, 2019 at

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread John McKown
On Tue, May 28, 2019 at 12:46 PM Farley, Peter x23353 < peter.far...@broadridge.com> wrote: > Ray, > > PMFJI here, but as a regular application programmer (not a sysprog) I do > not understand how the FTP JES option allowed is a configuration > vulnerability. > > Isn't the FTP JES option one of

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Ray Overby
lf Of Ray Overby Sent: Tuesday, May 28, 2019 11:44 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls This discussion on mainframe vulnerabilities has unfortunately broken down. I have been talking to mainframe people about vulnerabilities for the last

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Farley, Peter x23353
different from TSO SUBMIT? Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Ray Overby Sent: Tuesday, May 28, 2019 11:44 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls This discussion

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
Demos remind me of this joke. http://www.jokes.net/heavenandhell.htm  I’ve seen my share of demos that make claims or promises that simply never occur. Thanks Ray, I’ll pass. Sent from Yahoo Mail for iPhone On Tuesday, May 28, 2019, 1:20 PM, Ray Overby wrote: Bill - I am not interested in

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Ray Overby
Bill - I am not interested in selling you anything. I will just demo an exploit of a code vulnerability. That's it. On 5/28/2019 12:09 PM, Bill Johnson wrote: lol, oh it’s a demo and you sell something to fix the hole right? But, it has never been exploited in the real world. Sent from

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
lol, oh it’s a demo and you sell something to fix the hole right? But, it has never been exploited in the real world. Sent from Yahoo Mail for iPhone On Tuesday, May 28, 2019, 1:06 PM, Ray Overby wrote: Bill - I assure you the silliness is all on your part. ;-) /Show me a link to your

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Ray Overby
Bill - I assure you the silliness is all on your part. ;-) /Show me a link to your third scenario successfully implemented? /My company does not publicly disclose z/OS code vulnerabilities that it finds in z/OS, ISV and installation code. I would be happy to demo one of the vulnerabilities for

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread ITschak Mugzach
Radoslav, "Claiming that z/OS has flaws as other systems is the same as claiming bank is vulnerable to burglars as houses" I am sure you've heard of mettdown an Spectre. IBM CPU have same issues as any other cpu in market -( ITschak On Tue, May 28, 2019 at 7:53 PM R.S. wrote: > W dniu

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread R.S.
W dniu 2019-05-28 o 16:31, ITschak Mugzach pisze: Bill, I agree that z/os has the potential to be a secure system, however people configure it. What i do is to show you at real time, the delta between actual and required state if hundreds of security controls. Just to make z/os safe as it

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Seymour J Metz
PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls Excellent suggestions for vulnerability categories. If an exploit uses anonymous FTP wouldn't Anonymous FTP be considered vulnerable in its current configuration? If not what would you consider

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Seymour J Metz
05F0 0A0C -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Clark Morris Sent: Monday, May 27, 2019 2:14 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
Pure silliness now. As this topic always becomes. I never said or insinuated the platform was immune. In shops I’ve worked, very few had access to add to the APF list. Security and Audit often questioned additions. Most additions were software libs from 2-3 vendors whose libraries were also

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Ray Overby
://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Ray Overby Sent: Tuesday, May 28, 2019 11:44 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls This discussion on mainframe

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Seymour J Metz
From: IBM Mainframe Discussion List on behalf of Lennie Dymoke-Bradshaw Sent: Tuesday, May 28, 2019 9:12 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls In addition to defining what is "security" we need

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Seymour J Metz
@LISTSERV.UA.EDU Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls This discussion on mainframe vulnerabilities has unfortunately broken down. I have been talking to mainframe people about vulnerabilities for the last 12 years. I have talked with people just like Bill Johnson. My

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Ray Overby
This discussion on mainframe vulnerabilities has unfortunately broken down. I have been talking to mainframe people about vulnerabilities for the last 12 years. I have talked with people just like Bill Johnson. My discussions went just like this discussion did. The problem (as I saw it) was

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread John McKown
On Tue, May 28, 2019 at 10:27 AM Mike Schwab wrote: > Yet many more people still break into homes vs banks despite low yield > because of the low odds of being cot and the low penalty if you are > caught. > > "low penalty" in Texas is not necessarily true. I someone were to break into my boss'

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Mike Schwab
ll Johnson > > Sent: 27 May, 2019 18:20 > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls > > > > Your analogies are similar to claiming houses are broken into more than > > banks because there are more of them. Wh

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
I agree, the biggest exposure is the people who don’t take security seriously. But, z/OS is inherently more secure than other platforms because of the design. In the bank and insurance company I worked for, security was paramount. Because of the data we handled. Banking records are as critical

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread ITschak Mugzach
Bill, I agree that z/os has the potential to be a secure system, however people configure it. What i do is to show you at real time, the delta between actual and required state if hundreds of security controls. Just to make z/os safe as it should. Most people here think the same. Z/is has the

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
And you sell security services. What do I expect you to say? Not everything I provided was IBM. Sent from Yahoo Mail for iPhone On Tuesday, May 28, 2019, 10:13 AM, ITschak Mugzach wrote: These Are IBM docs. What you expect them to say? ITschak בתאריך יום ג׳, 28 במאי 2019, 16:54, מאת Tom

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread ITschak Mugzach
These Are IBM docs. What you expect them to say? ITschak בתאריך יום ג׳, 28 במאי 2019, 16:54, מאת Tom Marchant ‏< 000a2a8c2020-dmarc-requ...@listserv.ua.edu>: > On Tue, 28 May 2019 13:32:35 +, Bill Johnson wrote: > > >If you either didn’t read or didn’t comprehend the posts I provided, I

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
Ones, not zones. Sent from Yahoo Mail for iPhone On Tuesday, May 28, 2019, 9:54 AM, Tom Marchant <000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote: On Tue, 28 May 2019 13:32:35 +, Bill Johnson wrote: >If you either didn’t read or didn’t comprehend the posts I provided, I cannot

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
It’s an absolute fact security is one of the main reasons the mainframe is still used in industries that require the best security. You can google it and see numerous links. I worked at a bank and can verify. Also at an insurance company. I also have extensive criminal justice training as well.

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
Did you ever work at a bank? I doubt it. Sent from Yahoo Mail for iPhone On Tuesday, May 28, 2019, 9:54 AM, Tom Marchant <000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote: On Tue, 28 May 2019 13:32:35 +, Bill Johnson wrote: >If you either didn’t read or didn’t comprehend the posts

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Tom Marchant
On Tue, 28 May 2019 13:32:35 +, Bill Johnson wrote: >If you either didn’t read or didn’t comprehend the posts I provided, I cannot >help you. As I wrote, I read all of the references that you posted. Yes, I understood them. You misrepresented what they said. Now your response is to insult

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
A.EDU > Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls > > In addition to defining what is "security" we need to define what we mean > by "hacking". In my previous career at IBM I was asked this many times. At > that time I preferred to talk of

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Vernooij, Kees (ITOP NM) - KLM
age- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Lennie Dymoke-Bradshaw > Sent: 28 May, 2019 15:12 > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls > > In addition to defining wh

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Bill Johnson
If you either didn’t read or didn’t comprehend the posts I provided, I cannot help you. Sent from Yahoo Mail for iPhone On Tuesday, May 28, 2019, 9:17 AM, Tom Marchant <000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote: On Mon, 27 May 2019 16:05:33 +, Bill Johnson wrote:

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Tom Marchant
On Mon, 27 May 2019 16:05:33 +, Bill Johnson wrote: >Mainframes are by design far more secure. For good reason. The exposure >is catastrophic potentially. It’s one of the main reasons why banks rely and >stay on it and spend tens of millions for it. I’ve already provided numerous >links

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Lennie Dymoke-Bradshaw
t if you can delay him for only one hour to steal a million. Kees. > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of R.S. > Sent: 28 May, 2019 9:00 > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Fwd: Just how secure ar

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Vernooij, Kees (ITOP NM) - KLM
. > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of R.S. > Sent: 28 May, 2019 9:00 > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls > > W dniu 2019-05-27 o 17:

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread Vernooij, Kees (ITOP NM) - KLM
UA.EDU] On > Behalf Of Bill Johnson > Sent: 27 May, 2019 18:20 > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Fwd: Just how secure are mainframes? | Trevor Eddolls > > Your analogies are similar to claiming houses are broken into more than > banks because there are more of th

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-28 Thread R.S.
W dniu 2019-05-27 o 17:45, Chad Rikansrud pisze: At the risk of re-kicking the already dead horse: Bill, you're comparing apples and spiders. Are there fewer mainframe 'hacks'? Yep. There are also exponentially fewer mainframes than Windows / Android / Mac / IOS / Linux. Like - a few

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-27 Thread ITschak Mugzach
That true. The system is protected as far you protect it according to the best practice recommended by the vendor, standard organizations and hardening frameworks. if you follow the rules, you minimize the risk. A client asked me few days ago how can I get his password. I told him that I don't

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-27 Thread Clark Morris
[Default] On 27 May 2019 09:05:47 -0700, in bit.listserv.ibm-main 0047540adefe-dmarc-requ...@listserv.ua.edu (Bill Johnson) wrote: >Mainframes are by design far more secure. For good reason. The exposure is >catastrophic potentially. It’s one of the main reasons why banks rely and stay >on

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-27 Thread Bill Johnson
Your analogies are similar to claiming houses are broken into more than banks because there are more of them. Whereas the real reason is the ease of breaking in. Sent from Yahoo Mail for iPhone On Monday, May 27, 2019, 11:45 AM, Chad Rikansrud wrote: At the risk of re-kicking the already

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-27 Thread Bill Johnson
Mainframes are by design far more secure. For good reason. The exposure is catastrophic potentially. It’s one of the main reasons why banks rely and stay on it and spend tens of millions for it. I’ve already provided numerous links referencing it. Add in my criminal justice knowledge along with

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-27 Thread Bill Johnson
Where the money is, banking/mainframes. Trillions. Sent from Yahoo Mail for iPhone On Monday, May 27, 2019, 11:45 AM, Chad Rikansrud wrote: At the risk of re-kicking the already dead horse:  Bill, you're comparing apples and spiders.  Are there fewer mainframe 'hacks'? Yep.  There are

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-27 Thread Chad Rikansrud
At the risk of re-kicking the already dead horse: Bill, you're comparing apples and spiders. Are there fewer mainframe 'hacks'? Yep. There are also exponentially fewer mainframes than Windows / Android / Mac / IOS / Linux. Like - a few thousand mainframes compared to 2.5 BILLION users of

Re: Fwd: Just how secure are mainframes? | Trevor Eddolls

2019-05-26 Thread Bill Johnson
Yet, they aren’t hacked. While other platforms are hacked every day. Sent from Yahoo Mail for iPhone On Sunday, May 26, 2019, 6:07 PM, Mark Regan wrote: https://it.toolbox.com/blogs/trevoreddolls/just-how-secure-are-mainframes-052619 or *https://tinyurl.com/y2mfd3tl