Re: Interesting discussion on ServerFault regarding an idiotic auditor ...
Mike Wills <[email protected]> Wed, 27 Jul 2011 13:54:42 -0500
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Message-ID | <CAM7jp7HCONLkR9B4c9LhOG9B_HBOuiYCdywa35h4T+orjA9u3Q@mail.gmail.com> |
All the poster said is that it was a small UK company and they he switched to PayPal for the quick fix. PCI is investigating the company. Glad I didn't have to deal with that moron. I would have asked how he proposed me getting the plain-text passwords from the user accounts when it is a one-way hash and to have a great guru like himself could teach me something I didn't know. -- Mike Wills http://mikewills.me On Wed, Jul 27, 2011 at 1:44 PM, Larry Paque <[email protected]> wrote: > The only reasonable (if that's the word) explanation I can think of is that > the auditor had his email hacked and the poster is emailing with the hacker > or his cohort. > > I was reading quickly - did he ever get anybody on the phone? > > On Wed, Jul 27, 2011 at 1:37 PM, Mike Wills <[email protected]> wrote: > >> Reading through the demands. I don't think any of us could provide >> that on the i either. IIRC, I believe most log in systems these days >> store the hash then compare the two hashes to make sure they match. >> The systems themselves may not even know the real password. >> >> -- >> Mike Wills >> http://mikewills.me >> >> >> >> On Wed, Jul 27, 2011 at 12:12 PM, David Gibbs <david-Zwy7GipZuJhWk0Htik3J/[email protected]> wrote: >> > http://urlq.us/2g >> > >> > >> > -- >> > IBM i on Power Systems - For when you can't afford to be out of business >> > _______________________________________________ >> > This is the Security Administration on the AS400 / iSeries (Security400) >> mailing list >> > To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] >> > To subscribe, unsubscribe, or change list options, >> > visit: http://lists.midrange.com/mailman/listinfo/security400 >> > or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] >> > Before posting, please take a moment to review the archives >> > at http://archive.midrange.com/security400. >> > >> > >> _______________________________________________ >> This is the Security Administration on the AS400 / iSeries (Security400) >> mailing list >> To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] >> To subscribe, unsubscribe, or change list options, >> visit: http://lists.midrange.com/mailman/listinfo/security400 >> or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] >> Before posting, please take a moment to review the archives >> at http://archive.midrange.com/security400. >> >> > _______________________________________________ > This is the Security Administration on the AS400 / iSeries (Security400) mailing list > To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] > To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/mailman/listinfo/security400 > or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] > Before posting, please take a moment to review the archives > at http://archive.midrange.com/security400. > > _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.