We can dispute how effective the protection is, but S/N is (can be)
perfectly known to every customer and every IBMer, and even DHL employees.
What is not know is the method to calculate the password. Maybe it's not
so hard to "hack" SE and "disassemble" this method, but is NOT known
neither to customer nor to most IBMers, including CE's.
What is it intended for - that's another question, but I think that
other users like sysprog, acsadmin and service do have enough facilities
to shut one's own foot.
--
Radoslaw Skorupka
Lodz, Poland
W dniu 2012-03-22 12:40, Costin Enache pisze:
I write that the S/N is secret, as it is the only thing specific to a certain
installation. The method is present on all the SEs in the world, and the tables
on all the SEs with the same MCL - this makes them not so secret. But the S/N
is unique, known by IBM and the client - it may be not enough, but it is all we
have. In a secure setup, it hardly matters, as is not intended to protect the
system against external attacks, just against technical misuse by legitimate
users. Of course, the HMCs are a different topic, but not for this thread.
Costin
________________________________
From: R.S.<r.skoru...@bremultibank.com.pl>
To: IBM-MAIN@bama.ua.edu
Sent: Thursday, March 22, 2012 12:33 PM
Subject: Re: Secret Service Guide
Well, I cannot agree. Serial number is know as well as the date. The
only secret part is the method, algorithm.
BTW, disclaimer: I wish I knew the PEMODE password, but I didn't look
for it. I was looking for Service Manuals.
Regards
--
Radoslaw Skorupka
Lodz, Poland
W dniu 2012-03-22 11:35, Costin Enache pisze:
The PEMODE password is calculated from the system serial number (CEC, 12 characters),
current date, and a mutate table which is specific to the SE software main release
version and MCL. The only "secret" part is the serial number ... I guess it was
never intended to be a very secret method, but rather to avoid people damaging things.
Costin
________________________________
From: Charles Durrett<charles.durr...@gmail.com>
To: IBM-MAIN@bama.ua.edu
Sent: Wednesday, March 21, 2012 3:55 PM
Subject: Re: Secret Service Guide
On Saturday, March 17, 2012 10:11:20 AM UTC-5, R.S. wrote:
MP3000 Service Guide is SY24-6155 - easily found online. It even has
the default Support Element logon passwords - Woo-Hoo!
Thank you for the hint.
BTW: the passwords are well known and have "always" been documented.
Default passwords for HMC are:
SERVMODE for user SERVICE
PASSWORD for other documented users (*)
There is also undocumented user PEMODE, I would like to know his
password, but AFAIK it's time and s/n dependent.
PEMODE account is also present in a z890 Service Element - the signon panel
'leaks' enough information to tell if an account is setup on the machine.
The variable password with the account *might* be implemented per the 1994 IBM
US patent 5682475 - METHOD AND SYSTEM FOR VARIABLE PASSWORD ACCESS. If so then
the password search space is narrowed.
(*) I haven't checked two new (z196) Ensemble users
--
Radoslaw Skorupka
Lodz, Poland
...
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
--
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku przeznaczone
wycznie do uytku subowego adresata. Odbiorc moe by jedynie jej adresat z
wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem niniejszej wiadomoci
lub pracownikiem upowanionym do jej przekazania adresatowi, informujemy, e jej
rozpowszechnianie, kopiowanie, rozprowadzanie lub inne dziaanie o podobnym
charakterze jest prawnie zabronione i moe by karalne. Jeeli otrzymae t wiadomo
omykowo, prosimy niezwocznie zawiadomi nadawc wysyajc odpowied oraz trwale usun
t wiadomo wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.
This e-mail may contain legally privileged information of the Bank and is
intended solely for business use of the addressee. This e-mail may only be
received by the addressee and may not be disclosed to any third parties. If you
are not the intended addressee of this e-mail or the employee authorised to
forward it to the addressee, be advised that any dissemination, copying,
distribution or any other similar activity is legally prohibited and may be
punishable. If you received this e-mail by mistake please advise the sender
immediately by using the reply facility in your e-mail software and delete
permanently this e-mail including any copies of it either printed or saved to
hard drive.
BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax
+48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru
Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88.
Wedug stanu na dzie 01.01.2012 r. kapita zakadowy BRE Banku SA (w caoci
wpacony) wynosi 168.410.984 zotych.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
--
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.
This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive.
BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax
+48 (22) 829 00 33, www.brebank.pl, e-mail: i...@brebank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88.
Wedug stanu na dzie 01.01.2012 r. kapita zakadowy BRE Banku SA (w caoci wpacony) wynosi 168.410.984 zotych.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
