Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
Regarding the recent zero day vulnerability: So Atlassian was told by a third party that there is an actively abused vulnerability - as writing a patch or even identifying the root cause takes some time, they decided to publish an advisory so can at least limit the damages on your site. Alternatively, they could have published it on Monday, when the patch was ready with the message "you probably have been hacked by know". Is that any better?
-
@sbiewald
What rubs me in a very wrong way... Is not the advisory nor the recommendations.
It's this "marketing gag".
Not only does the statement somehow amuse me, as they recently torched a few instances of their customers in their "safe cloud"...
... but it sounds even more like a marketing gag.
I could really imagine the following talk:
"Hei we kow for years that our versions are out of date and security is a major issue.... What should we do?"
"Let's go cloud only, put a WAF before it and deprecate our server / data-center licenses - after all, we just need to add a few more layers of protection so no one cares about the severe security bugs we have. Plus we generate more income! Great idea!"
And yes. I infer all of this from this little stupid blue image, cause it annoys the fuck out of me.
https://confluence.atlassian.com/do...
-
@zergioz ???
Related Rants
Hacker 101
Atlasssian Bitbucket has broken umlauts since version 8.0 ...
https://jira.atlassian.com/browse/...
Ladies and gentleman,
it's the year 2022.
In the internet, dat "Neuland" as Mama Merkel used to say, Atlassian managed to revert back to the good old times of ASCII.
Who needs proper multibyte charset support anyway?
Just display broken shit - as broken as the quality management of that misanthropic chum bucket company called Atlassian.
Oh and the last upgrade to Confluence broke, too.
Was just very needed because of an remote code execution.
Cause you know the usual deal. Oops zero exploit, let's make it public, telling our customers that in cloud their data is safe, otherwise they need to shut off their instances or pray that they have a WAF that can filter strings...
What broke you might ask?
Unique constraint in database, the migration wizard loved to add few extra rows, solution was to fry the rows while instance running, followed by immediate cache drop, otherwise fun started again.
I hate Atlassian.
rant
nope
run forest run
atlasssian did it again