Make that a few mainframes for Yahoo! At least 500 million accounts were breached. In terms of number of accounts, Yahoo! has likely set a record for the biggest data breach of all time. (So far.)

If that’s not bad enough, it gets worse: Yahoo! reportedly did not tell its suitor, Verizon, about the data breach until at least two months after Yahoo!’s management found out — and only two days ago. In July Verizon agreed to acquire Yahoo! for $4.83 billion. Verizon might be able to pull out of the deal if it wishes.

Mainframes are widely recognized in the IT industry as the most securable platform. My “(Blank) Needs a Mainframe” series of periodic posts is a reminder that the IT community continues to fail at security, and that mainframes should form part of a holistic answer to fix this massive, growing, industry-wide failure.

This series of posts also reminds the mainframe community to be more vigilant than ever, not to assume that your mainframe environment is invulnerable. I recommend “healthy paranoia.” Every IBM mainframe ships with incredible security capabilities, many enabled by default, and more are optionally available. However, IT teams must know what they’re doing, must stay abreast of developments and technologies, and must competently operate their systems based on the latest information. And here’s a special reminder to CEOs, CFOs, and Chief Risk Officers: if you’re not caring for and investing in your workforce, you are significantly raising the risk of being the next victim of a security breach. “You get what you pay for,” including IT talent (or lack thereof).

Please be careful out there.

Jeff Hall argues the case for airlines to make their mainframes bigger (and the rest of their IT smaller).

I’d quibble with a couple of the finer technical points Hall made, but it’s an interesting, provocative take. I wonder how much “inside” information he has.

Paul Vallely, in one of the comments to Hall’s post, reports that, from his perspective as a distressed passenger, the only major piece of IT that was working at Delta during their outage was…their mainframe. Amidst the meltdown, Delta’s customer service agents, reachable by telephone (albeit with long waits on hold at times), had access to Delta’s mainframe-hosted applications and could handle most passenger issues (rebookings, refunds, etc.) “Based on what I saw and heard, it seems the mainframe was not the cause of the problem but it was actually a savior during the crisis,” Vallely wrote.

FREE! We all love that word, especially when it’s true. It’s true: there’s an amazing amount of wonderful, free stuff for mainframes that will probably surprise you. OK, admittedly nothing in life is truly free. You have to spend a little bit of effort implementing and exploiting this wonderful free stuff, and presumably your time isn’t always free. Lawyers like to say “no additional charge.” I’m not a lawyer.

As background, take a look at the 2013 Edition of this list. Most of the 2013 entries are still valid, but here are the updates and changes (only) for this 2016 Update….

Free Mainframes – Infrastructure as a Service

  • Would you like up to 120 days of free trial access to a real IBM LinuxONE mainframe with your choice of Linux distributions? Try the LinuxONE Community Cloud.
  • IBM offers the Enterprise DevOps for z Systems cloud-based trial, powered by the IBM Rational Development and Test Environment for z Systems. You can test drive IBM’s excellent development tools for z/OS on z/OS for up to 15 days at no charge. Yes, with access to real z/OS, CICS Transaction Server, DB2, IMS, etc.
  • IBM’s Master the Mainframe contest site moved here.
  • Connor Krukosky installed a real IBM z890 mainframe in his parents’ basement for a grand total cash outlay of about $350. OK, that’s only almost free, but if he could do it, why not you?

Free Mainframes – Platform as a Service

  • IBM offers a zero installation trial of its Automatic Binary Optimizer for z/OS product at Simply upload a COBOL module compiled with Enterprise COBOL Version 3 or Version 4, and IBM’s cloud-based ABO returns an ABO-optimized module, ready for testing and performance evaluation. If you like the results, you can order the 90-day ABO Trial Edition (IBM Program Number 5697-TR1), also at no additional charge. IBM offers some other no charge trial licenses, for example Enterprise COBOL Version 6 (5655-TY6).
  • Are you developing an amazing application that takes advantage of Blockchain shared ledger technologies? Try IBM’s unique High Security Blockchain environment, running on real IBM LinuxONE servers. (Because if you don’t have strong security to protect access to your Blockchain, what’s the point?) At this writing the trial link is here, and free access is available to practically anybody with an interesting application. But if that link doesn’t work, start with this one instead.

Free Mainframe Operating Systems

  • Canonical’s Ubuntu Linux Server for LinuxONE and z Systems is available for download at no charge. If you want to run Ubuntu Server in production you’ll want to contact Canonical to sign up for a support agreement. (It’s the same story with other Linux distributors listed below.)
  • The MUSIC/SP operating system is available for download. In principle you could transfer MUSIC/SP to an IBM mainframe and run it there (probably under z/VM), but take a look at the license terms first to make sure you have (or, if necessary, obtain) permission.
  • SUSE Linux Enterprise Server for z Systems is available here, and Red Hat Enterprise Linux for z Systems is available here.
  • Sine Nomine Associates offers ClefOS for z Systems, a Linux distribution that tracks CentOS.

IBM Freebies for IBM Operating Systems

  • Don’t forget to look within your licensed software products for free gems. For example, z/OS Version 2.2 (and higher, presumably) includes the IBM Knowledge Center for z/OS at no additional charge. The Knowledge Center for z/OS hosts documentation directly on/from your mainframe. You can access that documentation using any standard Web browser, even from a mobile device or tablet. You don’t need any browser plug-ins or emulation software. You can customize and log user access to documentation if you wish, and you won’t need to worry about accessing Internet-based documentation or maintaining current documentation on PCs. That helps simplify disaster recovery procedures. The PC-based IBM Softcopy Librarian, also free, is the tool that uploads and maintains documentation in the Knowledge Center.
  • Wouldn’t it be nice to tap into a RESTful/JSON interface from any z/OS-hosted application you write (or enhance), even from a batch application? To send a text message through Twilio, check the shipment status of a package, or lookup geospatial coordinates using a Google Maps API, as examples? Now you can, and it’s free. The IBM Client Web Enablement Toolkit for z/OS is included with z/OS 2.2 and available for z/OS 2.1 at no additional charge. The IBM Client Web Enablement Toolkit provides both JSON parsing and HTTP/HTTPS protocol support (HTTPS recommended).
  • Other examples of free components within licensed software products include z/OS Connect (provided with the latest releases of CICS Transaction Server for z/OS and IMS Transaction Manager, as examples) and WebSphere Liberty Profile (in CICS Transaction Server and WebSphere Application Server for z/OS).
  • IBM’s CICS SupportPacs provide a wide range of useful add-ons to CICS Transaction Server. One of my favorites is SupportPac CA1Y, an add-on that provides interfaces to send and even receive e-mails directly within CICS Transaction Server.
  • Similarly, IBM offers several handy WebSphere MQ SupportPacs.

Other Freebies (Mostly for z/OS)

I’m sure I missed many mainframe freebies that are not listed in either the 2013 Edition or this 2016 Update. Please post your favorites in the comments.