[Info-vax] Should VSI create a security bug bounty program for VMS ?

[Stephen Hoffman]

On 2016-09-01 21:18:14 +0000, Craig A. Berry said:

> On 9/1/16 3:58 PM, Phillip Helbig (undress to reply) wrote:
>> In article <mailman.2.1472673255.26953.info-vax_rbnsn.com at rbnsn.com>, 
>> "Kerry Main" <kemain.nospam at gmail.com> writes:
> 
>>> And of course, cell phones/notebooks are really just big fat PC's with 
>>> big storage and little to zero security monitoring SW on them.
>> 
>> Right, which is why they have no business on a production network.
> 
> Why not? For many companies they are production systems in that people 
> use them to perform critical functions, possibly even accessing data on 
> that VMS system you've got hidden away.

Ayup.   Computers serve the business.

More than a few of those devices are also managed via MDM or otherwise, 
and the MDM packages provide the means to ensure current firmware and 
related apps are present.

More than a few of the OpenVMS folks I work with use mobile devices 
with OpenVMS.   OpenVMS lacks any infrastructure for MDM and for 
provisioning and profiles, unfortunately.

Then there's managing the servers.   I remotely manage various servers 
from phones and tablets regularly, and I'd really like for that to be 
easier.   Including OpenVMS servers.   If OMS/TNT gets opened up and/or 
gets updated, maybe there'll be better ways to do that, too?


-- 
Pure Personal Opinion | HoffmanLabs LLC