Passwords Revealed

[Guest.Visitor]

Actually if you set a comms trace going before users signon - you will see them coming into the 400 - username and password !!!!! But don't tell anyone!

[Guest.Visitor]

About 2 years ago, user id and passwords could be captured using dmpsysobj and looking at some offsets. Rochester ptf'ed the problem and they also strongly suggested retricting this command. I was able to capture QSECOFR password on another machine because of authority to dmpsysobj.

[Guest.Visitor]

A few years ago, i had an RPG program that enabled me, with QSECOFR authority, to reveal the UserID and password from the user profile file. Does anyone have any idea whether such a program still exists or where I might find a RPG listing. Craig

[Guest.Visitor]

If you are not using SSL (or similar) and using data transfer (FTP, ODBC, etc.) just use a sniffer and you'll see the passwords in actual text. There will be restrictions (how and if you use switches/hubs) but passwords as well as any other data being transferred (pay rates, sales figures, etc.) can be sniffed.