W dniu 2018-09-14 o 11:23, Tom Mathias pisze:
I want to add to my previous append and that is to recommend that user ids not
be shared. In my personal opinion, that is probably why it is not a good idea
to use the IBM-supplied userids. Not that they are insecure in and of
themselves, but that people using them probably also share them and sharing
userids certainly makes accountability much harder to achieve. So, in my
opinion, in addition to using good passwords, things should also be set up so
that for a given userid, only one person is using that userid.
Yes, I think that's obvious reason to not use default userids.
Deletion ot those users could be caused to avoid re-enabling them or
make attacks harder (hacker has to guess both username and password).
Re-enabling is psychological issue: it's easier to convince someone to
enable OPERATOR than to lend it's own userid. Dedicated userid is "more
personal". ;-)
BTW: I also like new method of STP configuration. Very clear!
Regards
--
Radoslaw Skorupka
Lodz, Poland
======================================================================
Jeśli nie jesteś adresatem tej wiadomości:
- powiadom nas o tym w mailu zwrotnym (dziękujemy!),
- usuń trwale tę wiadomość (i wszystkie kopie, które wydrukowałeś lub zapisałeś
na dysku).
Wiadomość ta może zawierać chronione prawem informacje, które może wykorzystać
tylko adresat.Przypominamy, że każdy, kto rozpowszechnia (kopiuje, rozprowadza)
tę wiadomość lub podejmuje podobne działania, narusza prawo i może podlegać
karze.
mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950
Warszawa,www.mBank.pl, e-mail: [email protected]. Sąd Rejonowy dla m. st.
Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, KRS 0000025237,
NIP: 526-021-50-88. Kapitał zakładowy (opłacony w całości) według stanu na
01.01.2018 r. wynosi 169.248.488 złotych.
If you are not the addressee of this message:
- let us know by replying to this e-mail (thank you!),
- delete this message permanently (including all the copies which you have
printed out or saved).
This message may contain legally protected information, which may be used
exclusively by the addressee.Please be reminded that anyone who disseminates
(copies, distributes) this message or takes any similar action, violates the
law and may be penalised.
mBank S.A. with its registered office in Warsaw, ul. Senatorska 18, 00-950
Warszawa,www.mBank.pl, e-mail: [email protected]. District Court for the Capital
City of Warsaw, 12th Commercial Division of the National Court Register, KRS
0000025237, NIP: 526-021-50-88. Fully paid-up share capital amounting to PLN
169,248,488 as at 1 January 2018.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
