US Cybercom says mass exploitation of Atlassian Confluence vulnerability ongoing

Re:US Cybercom says mass exploitation of Atlassian Confluenc... by ljm on Monday September 06, 2021 @01:28PM (#28435964)

I'm no fan of Jira or Confluence but you'll get forgotten wiki articles, for example, no matter what tech you choose.

Confluence? Forgotten

Git repos? Forgotten

Notion? New hotness, still forgotten

Google Docs / Office 365 ? Forgotten

This is just a difficult problem to solve, especially for organisations growing at speed.

[ Parent | on HN ]

Re:US Cybercom says mass exploitation of Atlassian Confluenc... by arminiusreturns on Monday September 06, 2021 @05:51PM (#28438502)

> Git repos?

One of these things is not like the other, and anybody who uses a real editor and VCS but still has to deal with confluence or the rest of the above knows it.

Child poster below going on about markdown etc is absolutely wrong.

[ Parent | on HN ]

Re:US Cybercom says mass exploitation of Atlassian Confluenc... by Godel_unicode on Monday September 06, 2021 @08:33PM (#28439591)

You're aware that you can dynamically generate wiki pages from git repos using (you guessed it) confluence, right? The problem is people, not tooling.

[ Parent | on HN ]

Re:US Cybercom says mass exploitation of Atlassian Confluenc... by Aeolun on Tuesday September 07, 2021 @08:54AM (#28444121)

If you dynamically generate confluence pages from a git repo, what do you need confluence for? That’s a lot of money you can save.

[ Parent | on HN ]

Re:US Cybercom says mass exploitation of Atlassian Confluenc... by pokstad on Monday September 06, 2021 @10:29PM (#28440207)

How? Does it involve a 3rd party plugin? If so that’s DOA for any org concerned about security.

[ Parent | on HN ]

Re:US Cybercom says mass exploitation of Atlassian Confluenc... by arminiusreturns on Monday September 06, 2021 @11:11PM (#28440517)

How do you do that without yet another third party addon not even supported by Atlassian? (if you say via the api...)

[ Parent | on HN ]

Re:US Cybercom says mass exploitation of Atlassian Confluenc... by hobs on Monday September 06, 2021 @03:58PM (#28437394)

Agree, that's why I post that the discipline and management is required, not some specific tool - no tool solves the people problems adequately.

[ Parent | on HN ]

Re:US Cybercom says mass exploitation of Atlassian Confluenc... by wibagusto on Monday September 06, 2021 @03:05PM (#28436881)

Don’t forget Markdown, ReStructured text, asciidoc; forgotten useless garbage.

[ Parent | on HN ]