[ale] running OPA (other people's apps) on my network

[Geoffrey]

Chris Kleeschulte wrote:
> I need opinions here.
> 
> For a while now, I have been forced to run Custom Data Solution's  
> DataStreamer Jar file on hardware under my care. For some reason the  
> before-mentioned company insists on me running this jar file to be  
> able to submit data to them so we can get a discount from the vendor  
> that is a customer of theirs.
> 
> I have asked to just POST the data to them and they can run their own  
> app against it on their machines, they refuse.
> 
> I have asked to see the source code for the datastreamer java app,  
> they refuse.
> 
> I have told my company not to comply with their data plan, my company  
> refuses.
> 
> Custom Data Solution says that they have many customers who run their  
> app on the customer's machines/network, nary a complaint.

Their other customer's ignorance is not a rule for you to follow.

> I have quarantined this app as much as possible, but this is extremely  
> bad business for CDS to ask me to run their app on my network without  
> providing me the source code. I try to run only apps that I compile  
> myself or from trusted sources.
> 
> What would you all do in this situation? I guess I am just wondering  
> if you think that it is absurd for a client to ask a supplier to run  
> their software? The unmitigated gall.

Unless you know what it's doing, yes I find it absurd.  I would go to 
your company management and explain the privacy issues.

-- 
Until later, Geoffrey

Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety.
  - Benjamin Franklin