Archive for the Category: Security

T.Rob Wyatt’s MQ Password/CHLAUTH Research

October 25, 2016 Roger Lacroix

T.Rob Wyatt of IoPT Consulting has published an extremely extensive blog posting on the use of UserID/Password and CHLAUTH rules with IBM MQ V8 and V9. You can find it here: https://t-rob.net/2016/10/25/mq-idpwos-chlauth-exec-summary/ He did huge number and variety of tests against 9 different releases of MQ. A big thumbs up for the effort in creating […]

Also posted in IBM MQ, Linux, Windows Comments Off on T.Rob Wyatt’s MQ Password/CHLAUTH Research

Roger Lacroix’s MQTC Session Video

October 20, 2016 Roger Lacroix

Here is the third video that my daughters, Courtney and Sarah, recorded at MQ Technical Conference v2.0.1.6. Here’s Roger Lacroix’s MQ Visual Edit V2 – The Next Generation session: The presentation for MQ Visual Edit V2 – The Next Generation session can be found at: http://www.mqtechconference.com/sessions_v2016.html Note: All the videos can be found on my […]

Also posted in Capitalware, Education, IBM MQ, MQ Technical Conference, Video Comments Off on Roger Lacroix’s MQTC Session Video

A Prime Example of Bad Security Information

October 19, 2016 Roger Lacroix

This morning I noticed a new blog posting over at IBM’s MQdev Blog called Compiling IBM MQ sample programs on AIX platform using XL C/C++ Compiler by Prema Laxmanachar. This is a prime example of someone starting out with a good intentions but takes a short-cut and ends up writing an extremely bad MQ security […]

Also posted in IBM MQ, Unix 1 Comment

T.Rob Wyatt’s MQTC Session Video

October 13, 2016 Roger Lacroix

Here is the second video that my daughters, Courtney and Sarah, recorded at MQ Technical Conference v2.0.1.6. This session by T.Rob Wyatt is a MUST watch video for IT mangers, MQ mangers and Application Managers of any and all organizations that use IBM MQ. Here’s T.Rob Wyatt’s Check list of Top MQ Security Outstanding Bugs/Issues/Gotchas […]

Also posted in Education, IBM MQ, MQ Technical Conference, Video Comments Off on T.Rob Wyatt’s MQTC Session Video

NBR – Video Hack

August 26, 2016 Roger Lacroix

On yesterday’s (August 25th) episode of Nightly Business Report (NBR), they had a segment on how it is possible to hack a phone using a sound file. The segment starts 21 minutes and 22 seconds into the show. Regards, Roger Lacroix Capitalware Inc.

Also posted in Education, Video Comments Off on NBR – Video Hack

Using SSL TLS To Connect 2 MQ Queue Managers Using Self-Signed Certificates

June 16, 2016 Roger Lacroix

Angel Rivera and Mike Cregger of IBM have published a support document titled: Using SSL TLS to connect two MQ queue managers in MQ 7.5 and MQ 8.0 / MQ 9.0 using self-signed certificates The document provides step-by-step details for connecting a WebSphere MQ V7.5 queue manager in one platform (Windows) to a V8.0 queue […]

Also posted in Education, IBM MQ, IBM MQ Appliance, Linux, Unix, Windows Comments Off on Using SSL TLS To Connect 2 MQ Queue Managers Using Self-Signed Certificates

Apple vs FBI Encryption Court Case

March 17, 2016 Roger Lacroix

I have not commented publicly on the Apple vs FBI encryption court case that is going on in the USA because Capitalware sells encryption software to companies to protect customer data, so you can guess that I’m on Apple’s side. This is not a simple issue like some people want to make it out to […]

Also posted in Education, iPhone, iPad & iPod Touch, MQ Authenticate User Security Exit, MQ Channel Encryption, MQ Enterprise Security Suite, MQ Message Encryption, Operating Systems, Video 1 Comment

Another Phishing Scam

March 16, 2016 Roger Lacroix

The other day, my brother’s Hotmail (Outlook.com) email account got hacked. First, I received an email from his account with the subject of ‘Favor’ and it said: I need you to do me a favor. Please reply when you get this. Not realizing that it was a hacker, I replied: “Got it”. Then I got […]

Also posted in Scam / Fraud 1 Comment

Another New Feature being added to MQAUSX (and z/MQAUSX)

February 25, 2016 Roger Lacroix

A customer requested a new feature be added to MQ Authenticate User Security Exit (MQAUSX). A customer asked if there was anyway to tell when a client disconnects from a queue manager. After a brief discussion with the customer, they said they had an application that accesses sensitive/confidential information and they wanted to know how […]

Also posted in Capitalware, IBM i (OS/400), IBM MQ, Linux, MQ Authenticate User Security Exit, Unix, Windows, z/OS Comments Off on Another New Feature being added to MQAUSX (and z/MQAUSX)

Call for Speakers for MQ Technical Conference v2.0.1.6

January 28, 2016 Roger Lacroix

We are looking for speakers on any product/service that uses IBM MQ (aka WebSphere MQ & MQSeries) for “MQ Technical Conference v2.0.1.6” (MQTC). The sessions are to be technical in nature and on any subject so long as it relates to MQ. We offer speakers the conference fee for free and we also pay for […]

Also posted in .NET, C, C++, Education, IBM i (OS/400), IBM MQ, Java, JMS, Linux, macOS (Mac OS X), MQ Technical Conference, Perl, Programming, Rexx, Unix, Windows, z/OS Comments Off on Call for Speakers for MQ Technical Conference v2.0.1.6