Re: Might be getting 1-day admin privileges to PC; what to install besides iSphere?

On 3/10/2015 4:56 PM, Dan wrote:

I'm not sure whether I'll be asked, but have either the iSphere or the
RPGUnit plug-ins been "vetted", officially or unofficially "blessed" by
IBM? I trust the people on this list, and am sure these plug-ins pose no
security risks, but they are pretty tight around here, and I'm not sure
whether anyone else here has already "officially" vetted any plug-ins for
RDi.

This is a great question in the age of open source software. I was
first asked it perhaps 10 years ago when I wanted to use CGIDEV2 in
production software.

My answer back then: 'We do not have a certification process for any
software, including our in-house RPG. We do not - and perhaps can not -
certify our RPG to meet specific security and supportability criteria,
not the least because there ARE NO security and supportability criteria
to be met.'

This of course is a non-answer to a manager. Managers implicitly trust
their developers to write their code 'properly'. They have no such
faith in developers they have never met. I don't think there's a good
answer beyond 'Do you trust me personally?'

In the case of these particular plugins, the enhancements are to RDi
itself. They don't connect to the database; there's no back door SQL
injection risk, etc. They enable a developer to develop better by
allowing him (me) to think better. If for some reason, iSphere were to
crash horribly, I'd be back to the bare bones RDi. Business continuity
would be completely unaffected.