4 ms·

What is atlassian doing? Last year it was the RCE CVE-2022-26134. And now this. Getting published by CISA every year isn't a good look.

deleted 3y ago
[deleted]
RomanPushkin 3y ago
We once had a meeting with our ex-CTO. The question was how do you envision the technical future of Atlassian. The most popular tag was "fire", referring to the "Five-alarm fire" program they introduced to fight a series or emerging outages. This program was over at the time when we had this poll. Seems like everyone in the org saw that in 2021. Later it was confirmed multiple times, with one of the services down for almost a week for some clients, and TBH with other outages. And in 2021 the CTO just ignored the most popular "fire" answer saying something "while we're getting votes coming in, let's talk about..." They replaced CTO, but it didn't help. At this point I'm pretty confident it's about founders who cannot keep it under control. So you know, this org is 70-80% KTLO.
- talent_deprived 3y ago
  IDK, I've used Jira and Confluence at almost every place I've worked the past 20 years, love those tools.
  - RomanPushkin 3y ago
    There is pretty substantial number of folks who hate Jira, TBH. But you're the reason is their stock is still flat, and the entire company worth something.
    - sofixa 3y ago
      They probably don't hate Jira, but specific implementations of it, which can easily turn to shit with bad management because the tool is flexible enough to allow it.
    - ninju 3y ago
      > reason is their stock is still flat It's up 20% in the last 6 months https://www.google.com/finance/quote/TEAM:NASDAQ?sa=X&ved=2ahUKEwiCvcyauYCCAxU4L1kFHdTKA-EQ3ecFegQILBAf&window=6M https://www.google.com/finance/quote/TEAM:NASDAQ?sa=X&ved=2a...
      - RomanPushkin 3y ago
        Even if it's flat you can find a time frame when it's up. The reality is it's not the best stock by any means, and it will never will be. Why? Because it's Atlassian. No-innovation, KTLO-kind-of-company.
- mschuster91 3y ago
  > At this point I'm pretty confident it's about founders who cannot keep it under control. They seem to be purely on the growth-by-acquisition trend, hell almost all of their products are acquisitions that have been more-or-less shoddily "integrated"... just a week ago they bought Loom for a billion $ - money that would have been better invested in bringing their code and service quality up to speed. Atlassian is enshittification-as-a-service, just that this time it isn't the general population being squeezed but large corporations.
nonameiguess 3y ago
I don't remember if it was this one, but Confluence had a pre-login vulnerability a while back that was actively exploited on DI2E, which had been the DoD's largest unclassified system, used as a collaboration and platform layer for all defense and intelligence projects that didn't have their own isolated environment, ironically only a couple months before it was scheduled to sunset anyway. They had to lock and bring down their entire data center for months before they could be sure everything was clean, and all defense projects that didn't have their planning data backed up somewhere else just lost it that entire time. And we'll never know how many programs that were considered sensitive but not enough to be classified had planning data compromised or by whom. The only reason Atlassian hasn't totally lost the entire US government at this point is inertia and the remaining influence of however many thousands of agile consultants and project managers out there just love Jira and don't want anyone to move their cheese.

deleted 3y ago

[deleted]

RomanPushkin 3y ago

We once had a meeting with our ex-CTO. The question was how do you envision the technical future of Atlassian. The most popular tag was "fire", referring to the "Five-alarm fire" program they introduced to fight a series or emerging outages. This program was over at the time when we had this poll. Seems like everyone in the org saw that in 2021. Later it was confirmed multiple times, with one of the services down for almost a week for some clients, and TBH with other outages. And in 2021 the CTO just ignored the most popular "fire" answer saying something "while we're getting votes coming in, let's talk about..." They replaced CTO, but it didn't help. At this point I'm pretty confident it's about founders who cannot keep it under control. So you know, this org is 70-80% KTLO.

talent_deprived 3y ago
IDK, I've used Jira and Confluence at almost every place I've worked the past 20 years, love those tools.
- RomanPushkin 3y ago
  There is pretty substantial number of folks who hate Jira, TBH. But you're the reason is their stock is still flat, and the entire company worth something.
  - sofixa 3y ago
    They probably don't hate Jira, but specific implementations of it, which can easily turn to shit with bad management because the tool is flexible enough to allow it.
  - ninju 3y ago
    > reason is their stock is still flat It's up 20% in the last 6 months https://www.google.com/finance/quote/TEAM:NASDAQ?sa=X&ved=2ahUKEwiCvcyauYCCAxU4L1kFHdTKA-EQ3ecFegQILBAf&window=6M https://www.google.com/finance/quote/TEAM:NASDAQ?sa=X&ved=2a...
    - RomanPushkin 3y ago
      Even if it's flat you can find a time frame when it's up. The reality is it's not the best stock by any means, and it will never will be. Why? Because it's Atlassian. No-innovation, KTLO-kind-of-company.
mschuster91 3y ago
> At this point I'm pretty confident it's about founders who cannot keep it under control. They seem to be purely on the growth-by-acquisition trend, hell almost all of their products are acquisitions that have been more-or-less shoddily "integrated"... just a week ago they bought Loom for a billion $ - money that would have been better invested in bringing their code and service quality up to speed. Atlassian is enshittification-as-a-service, just that this time it isn't the general population being squeezed but large corporations.

nonameiguess 3y ago

I don't remember if it was this one, but Confluence had a pre-login vulnerability a while back that was actively exploited on DI2E, which had been the DoD's largest unclassified system, used as a collaboration and platform layer for all defense and intelligence projects that didn't have their own isolated environment, ironically only a couple months before it was scheduled to sunset anyway. They had to lock and bring down their entire data center for months before they could be sure everything was clean, and all defense projects that didn't have their planning data backed up somewhere else just lost it that entire time. And we'll never know how many programs that were considered sensitive but not enough to be classified had planning data compromised or by whom. The only reason Atlassian hasn't totally lost the entire US government at this point is inertia and the remaining influence of however many thousands of agile consultants and project managers out there just love Jira and don't want anyone to move their cheese.