News for hackers. Stuff that matters.
Re:HipChat security notice by algesten on Monday April 24, 2017 @05:24PM (#14188446)
Surely that's completely unreasonable. Who can claim that any piece of software is without bugs/security holes?

The problem is absolutely owned by Atlassian, but they actually did do something to fix it.

I don't believe anyone (apart from maybe Daniel J Bernstein) can claim any piece of software is bug/hole free, and neither does anyone need to!

Re:HipChat security notice by geofft on Monday April 24, 2017 @06:19PM (#14188923)
Why is that unreasonable? If I write a complex piece of software, and something goes wrong, the blame is on me. As you say, there's no way to claim that it is without bugs.

Why, when I use someone else's software without so much as telling them, let alone signing a support contract with them, does the blame shift to them? My responsibility is to deliver a service, not to write software. If writing software is the easiest way to do it, great. If using someone else's software is the easiest way to do it, great. But I'm the one running the service, either way.