News for hackers. Stuff that matters.
Re:Ask HN: Which Wiki or internal documentation tools do you... by dimitar on Friday January 11, 2019 @10:38AM (#18884216)
The worst bug (or bad design if you wish) I've seen in confluence is the following - permissions on pages are inherited in a tree-like manner, parent to child. A reindex wasn't done and at some point child pages with sensitive information became viewable to every user because the permissions were not re-applied.

I would absolutely never rely on the permissions in Confluence to store anything sensitive in it ever again.

Re:Ask HN: Which Wiki or internal documentation tools do you... by 013a on Friday January 11, 2019 @12:26PM (#18885061)
Yeah, we have a corporate policy of never storing anything critically sensitive in an Atlassian product. Though, to be fair, we have the same policy for Slack and most of our tools; that stuff never leaves Amazon.