4 ms·

Very concerning - they accidentally distributed their entire customer list and now I have to handle the internal PR fall out re: my email address and that those

Very concerning - they accidentally distributed their entire customer list and now I have to handle the internal PR fall out re: my email address and that those of non-technical co-workers (board, accounts, finance, engineering managers) have been distributed globally and then subsequently pastebined. Times like this I'm glad that our code is hosted internally and access to it is controlled internally. https://dl.dropbox.com/u/109905580/Screenshots/qg~abn4fl601.png https://dl.dropbox.com/u/109905580/Screenshots/qg~abn4fl601.... https://dl.dropbox.com/u/109905580/Screenshots/73dw6%7Eq_h4hq.png https://dl.dropbox.com/u/109905580/Screenshots/73dw6%7Eq_h4h...

eli 14y ago
I wouldn't normally consider my email address a secret. I assume the concern is over spear phishing?
- ghuntley 14y ago
  Email address isn't secret, the use of certain tools for some however is. Enterprise is a different game than your usual early stage web/product startup. Politics are real, exist and credibility is on the line when you stick your ass out to vouch for a company/product outside of the company standard. Base cost for this software is $5k/yr for one seat pack (20 devs), whereas the competition - Atlasssian is incredibly price competitive (10 users for $10, 25 users for $1,800) - keep in mind competition also exists in the form of TFS (ergh) which is free for MSDN subscribers and included in most enterprise licensing agreements.
  - eli 14y ago
    Sorry, still not sure I follow. So the issue is that, for example, the corporate office could discover that a certain department is using what--in their opinion--is an overpriced solution?
    - jasonlotito 14y ago
      An overpriced insecure solution.
      - ghuntley 14y ago
        Exactly. Perception management for those who will never read or care about the technical explanation but will know about it tomorrow when the industry publications they read publish it in their early-morning newsletter. Now imagine some poor developer stuck with TFS or Visual Source Safe right at this moment trying to convince his line manager to change to the "overpriced insecure [non-standard] solution." For enterprise, decisions on what tools are used (or shortlisted) are almost always made by those who don't use them thus why it is important to manage perceptions. TL;DR - enterprise is broken.
        pnathan 14y ago
        Confirm. Perception management is one of the key things that starts coming into play when you have people far up enough the chain that they don't use the tools. Perception is actually everything, it turns out. :-(
- robryan 14y ago
  If a competitor is looking to market their version control solution to enterprise this email list is going to be a very good place to start.
  - ghuntley 14y ago
    On the flip slide, if a developer cares about their tools and is looking to jump ship then they now have a shortlist of companies and contact details as to whom to approach within the company. ;-)
  - rscale 14y ago
    Atlassian isn't going to spam Stash or BitBucket to the exposed users. They'd get crucified. There might be a few users who were already frustrated and switch on their own, but I think the big problems are an ongoing spearphishing risk and a bruised ego.
    - dubcanada 14y ago
      Come again? Atlassian doesn't email you when you need to repay or when you had paid? This wasn't "spam" it was an accident email send. Things pretty much every single giant website has accidently done at least once.
      - deleted 14y ago
        [deleted]
      - rscale 14y ago
        I was responding to my parent comment's concern that GitHub's competitors (e.g. Atlassian) would use the leaked/pastebinned GitHub emails as a mailing list.
- robinson-wall 14y ago
  I've already received an "invite to check out Dropbox" to an email address that only GitHub knew.
  - jaryd 14y ago
    As did I... I replied tongue-in-cheek and the kid sent me what appeared to be a pretty heart-felt apology. Probably just saw a quick chance to get some upload credit, and didn't pause to think he was spamming a list of professionals in high-tech :)
revelation 14y ago
It looks like you printed that email and then splashed some water on top. Why would you link to that in the first place?
- ghuntley 14y ago
  Proof that I was one of the enterprise customers who had their information disclosed and thus is directly affected by this unlike 99% of the other posters in that run-away lol ruby thread which is unfortunately at the top of HN.

eli 14y ago

I wouldn't normally consider my email address a secret. I assume the concern is over spear phishing?

ghuntley 14y ago
Email address isn't secret, the use of certain tools for some however is. Enterprise is a different game than your usual early stage web/product startup. Politics are real, exist and credibility is on the line when you stick your ass out to vouch for a company/product outside of the company standard. Base cost for this software is $5k/yr for one seat pack (20 devs), whereas the competition - Atlasssian is incredibly price competitive (10 users for $10, 25 users for $1,800) - keep in mind competition also exists in the form of TFS (ergh) which is free for MSDN subscribers and included in most enterprise licensing agreements.
- eli 14y ago
  Sorry, still not sure I follow. So the issue is that, for example, the corporate office could discover that a certain department is using what--in their opinion--is an overpriced solution?
  - jasonlotito 14y ago
    An overpriced insecure solution.
    - ghuntley 14y ago
      Exactly. Perception management for those who will never read or care about the technical explanation but will know about it tomorrow when the industry publications they read publish it in their early-morning newsletter. Now imagine some poor developer stuck with TFS or Visual Source Safe right at this moment trying to convince his line manager to change to the "overpriced insecure [non-standard] solution." For enterprise, decisions on what tools are used (or shortlisted) are almost always made by those who don't use them thus why it is important to manage perceptions. TL;DR - enterprise is broken.
      - pnathan 14y ago
        Confirm. Perception management is one of the key things that starts coming into play when you have people far up enough the chain that they don't use the tools. Perception is actually everything, it turns out. :-(
robryan 14y ago
If a competitor is looking to market their version control solution to enterprise this email list is going to be a very good place to start.
- ghuntley 14y ago
  On the flip slide, if a developer cares about their tools and is looking to jump ship then they now have a shortlist of companies and contact details as to whom to approach within the company. ;-)
- rscale 14y ago
  Atlassian isn't going to spam Stash or BitBucket to the exposed users. They'd get crucified. There might be a few users who were already frustrated and switch on their own, but I think the big problems are an ongoing spearphishing risk and a bruised ego.
  - dubcanada 14y ago
    Come again? Atlassian doesn't email you when you need to repay or when you had paid? This wasn't "spam" it was an accident email send. Things pretty much every single giant website has accidently done at least once.
    - deleted 14y ago
      [deleted]
    - rscale 14y ago
      I was responding to my parent comment's concern that GitHub's competitors (e.g. Atlassian) would use the leaked/pastebinned GitHub emails as a mailing list.
robinson-wall 14y ago
I've already received an "invite to check out Dropbox" to an email address that only GitHub knew.
- jaryd 14y ago
  As did I... I replied tongue-in-cheek and the kid sent me what appeared to be a pretty heart-felt apology. Probably just saw a quick chance to get some upload credit, and didn't pause to think he was spamming a list of professionals in high-tech :)

revelation 14y ago

It looks like you printed that email and then splashed some water on top. Why would you link to that in the first place?

ghuntley 14y ago
Proof that I was one of the enterprise customers who had their information disclosed and thus is directly affected by this unlike 99% of the other posters in that run-away lol ruby thread which is unfortunately at the top of HN.