3 ms·
if it's on-prem, can't you just edit it to not phone home?
by MuffinFlavored 6y ago
if it's on-prem, can't you just edit it to not phone home?
- looperhacks 6y agoYou'd need to reverse-engineer the built java files, which probably isn't so easy and that a company will do this
- tinus_hn 6y agoCan’t you just firewall it? I imagine you’d lose support though.
- rtkwe 6y agoDepends on what kind of check it's doing. I doubt it fails open and if it does you're violating the license and open to big damages from Atlassian.
- UnlockedSecrets 6y agoI imagine reverse engineering it to not phone home would violate the license in the same way.
- rtkwe 6y agoYeah I meant even if it does fail open such that you could hack it to keep using it, doing so would definitely violate the license.
- junon 6y agoNot for a company, just for my own testing, but I did this several years back. It was ridiculously easy assuming you know how a java decompiler works. One JAR needed to be patched and re-compiled, which is a trivial process if you know how classpaths work.
- predakanga 6y agoYou don't even need to patch any files - you can patch classes at runtime using a "-javaagent" library. There are plenty of libraries out there to facilitate this such as Javassist or Apache BCEL, and lots of legitimate uses (AOP, instrumentation, etc).
- junon 6y agoIt'd be weird to have access to the command line but not to the jars themselves, I think. Creating a jar is simple if you have a zip program.
- paulddraper 6y agoYou wouldn't need to. JIRA Server licenses are perpetual. You only pay if you want upgrades. I've seen companies running JIRA from 2009.
- otterley 6y ago1. You'd be violating a contract by doing so, and putting yourself/company at risk of incurring significant monetary damages specified in the contract (or having your license terminated); 2. You might be committing criminal copyright violation; 3. The most obvious countermeasure is to write something to detect whether the software stops phoning home and use it to trigger an investigation.