<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Mike,<div class=""><br class=""></div><div class=""> We encourage all labs to use ChimeraX which is the successor to the Chimera program. Chimera is only receiving critical maintenance while ChimeraX 1.0 came out 2 years ago, now at version 1.4, and is actively developed.</div><div class=""><br class=""></div><div class=""> We are the academic lab at UCSF that develops Chimera and ChimeraX. We don't have formal development security reviews. Our source code is under version control and only modified by the core developers at UCSF. The software does not listen on ports and uses only web services that we host at UCSF. This is research software that can be used to run Python analysis scripts. Since Python is a general purpose language it can do anything on the computer that user privileges allow. The researcher writes those scripts or obtains them from other researchers and is responsible for assuring they do nothing malicious. Here is the Chimera developer web site</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><a href="https://www.rbvi.ucsf.edu/trac/chimera/wiki" class="">https://www.rbvi.ucsf.edu/trac/chimera/wiki</a></div><div class=""><br class=""></div><div class="">Here is the ChimeraX github repository and developer site</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><a href="https://github.com/RBVI/ChimeraX" class="">https://github.com/RBVI/ChimeraX</a></div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span><a href="https://www.rbvi.ucsf.edu/trac/ChimeraX/wiki" class="">https://www.rbvi.ucsf.edu/trac/ChimeraX/wiki</a></div><div class=""><br class=""><div><br class=""></div><div> Tom Goddard</div><div> ChimeraX and Chimera developer</div><div><br class=""></div><div><blockquote type="cite" class=""><div class="">On Oct 25, 2022, at 7:02 AM, Hart, Michael via Chimera-dev <<a href="mailto:chimera-dev@cgl.ucsf.edu" class="">chimera-dev@cgl.ucsf.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta charset="UTF-8" class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">I’ve been asked to approve installation of Chimera in one of our labs, and I was hoping that you might have documentation on your development processes and policies such that I can feel comfortable installing your app in our environment. I have searched but not found documentation related to OWASP or other dev standards, or any assessments that may have been run. Would you have information available? <o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Thank you in advance,<o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 16.8pt; background-color: white;" class=""><b class=""><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif; color: rgb(51, 51, 51); border: 1pt none windowtext; padding: 0in;" class="">Mike Hart | Chief Information Security Officer (CISO)</span></b><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif; color: rgb(51, 51, 51); border: 1pt none windowtext; padding: 0in;" class=""><br class=""><b class="">Metropolitan State University of Denver<br class="">Information Technology Services</b><br class="">Campus Box 96, P.O. Box 173362, Denver, CO 80217-3362<br class="">Admin Building - 1201 5<sup class="">th</sup> Street 480M Denver, CO 80204 <br class="">303-615-0541 (Office)<br class="">303-352-7548 (Help Desk)<br class=""></span><span style="" class=""><a href="mailto:mhart20@msudenver.edu" target="_blank" class=""><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif; color: blue; border: 1pt none windowtext; padding: 0in;" class="">mhart20@msudenver.edu</span></a></span><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif; color: rgb(51, 51, 51); border: 1pt none windowtext; padding: 0in;" class=""> | </span><span style="" class=""><a href="http://www.msudenver.edu/technology" target="_blank" class=""><span style="font-size: 10.5pt; font-family: Helvetica, sans-serif; color: blue; border: 1pt none windowtext; padding: 0in;" class="">www.msudenver.edu/technology</span></a></span><o:p class=""></o:p></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 16.8pt; background-color: white;" class=""><span style="color: rgb(33, 33, 33);" class=""><span id="cid:image001.jpg@01D8E848.158CADA0"><image001.jpg></span></span><span style="color: rgb(33, 33, 33);" class=""><o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; line-height: 16.8pt; background-color: white;" class=""><span style="color: rgb(33, 33, 33);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Chimera-dev mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:Chimera-dev@cgl.ucsf.edu" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">Chimera-dev@cgl.ucsf.edu</a><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="https://www.rbvi.ucsf.edu/mailman/listinfo/chimera-dev" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://www.rbvi.ucsf.edu/mailman/listinfo/chimera-dev</a></div></blockquote></div><br class=""></div></body></html>