HP3000-L Archives

April 2003, Week 4

HP3000-L@RAVEN.UTC.EDU

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
"rosenblatt, joseph" <[log in to unmask]>
Reply To:
rosenblatt, joseph
Date:
Tue, 22 Apr 2003 07:51:39 -0400
Content-Type:
text/plain
Parts/Attachments:
text/plain (37 lines)
I know I've been down this road before but I'm going down it again. If
somebody we do not know asks questions about security on the 3000 hear are
some questions I would use in answering them:
1. Who are you?
2. Why do you want to know?
3. What kind of Security Administrator are you if you think people will
answer Security questions in a public forum.
4. What company do you work for?

Here are some other rules of thumb I would use.
1. Does the question even vaguely sound like the questioner has any idea of
what MPE/3000 systems are?
2. Does the assignment sound plausible?

In this case the rules of thumb appear to be answerable in the negative.
Firstly, the questioner obviously knows nothing of MPE. This is not unusual
but he doesn't even know the name of the O/S. Secondly, who is going to ask
this person to "write a program (in Java or C++) to externally reset a
password for a user on HP3000." Is there a System Manager among any of you
who ask for such a program from somebody without even telling them the name
of the O/S?
I, therefore would not even tell this person the name of the O/S let alone
any details on how to accomplish this task. Would anyone answer a stranger's
question about how their vault locks or their locker combination? Obviously
people can do what they want but some of these questions stink of fish. A
little paranoia goes a long way but to little prudence is worse.

Let Peace be the maxim by which we act because we will Peace to become a
universal law.
Work For Peace
The opinions expressed herein are my own and not necessarily those of my
employer.
Yosef Rosenblatt

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

ATOM RSS1 RSS2