← Back to context

Comment by arashdelijani

8 years ago

Can you elaborate on this? Why does using git preclude security reviews?

Any software precludes security reviews in defense work. My group wanted mediawiki to run an internal wiki behind the firewall and it took 18 months to pass and my boss had about a dozen meetings and countless emails. There are cases where a developer had to write code in word because he couldn’t get a text editor (allegedly I didn’t actually witness it). When your network is constantly under state sponsored attack these precautions aren’t pointless. But it takes a company like Microsoft or IBM to be able to work with security reviews and get them through quickly.

Clearcase is a much more advanced tool than git. It is designed to do radically different things from the mere patch relationship management that git performs in its ultra glorified ways.

  • What are the best capabilities of ClearCase?

    • The most interesting to me specifically is the ability to define working copies through filter scripts. As far as I understand it, this is an alternative to branching. You can mix and match different components/alternative modules (e.g. different HALs or device drivers for different HW platforms) into sets of products without running afoul of the typical limitations of branches. However, Clearcase is just too expensive for us to even try it out seriously.