News for hackers. Stuff that matters.
Re:We built an air-gapped Jira alternative for regulated ind... by bobmcnamara on Tuesday July 22, 2025 @06:01PM (#44653505)
Years back a friend of mine's startup failed when USAF pirated their software and the original customer org stopped paying for it.

Feds are DMCA immune, so no real recourse.

Re:We built an air-gapped Jira alternative for regulated ind... by atonse on Tuesday July 22, 2025 @06:24PM (#44653691)
This seems very suspect.

Usually you do have recourse via procurement channels and reps. If you file a complaint with that agency stating that they’re using a license without paying for it, it will result in at least an investigation.

Re:We built an air-gapped Jira alternative for regulated ind... by michaelt on Tuesday July 22, 2025 @08:06PM (#44654373)
If you got to hire the cops to investigate your own mistakes, would you hire competent, motivated folks who'd leave no stone unturned and get access to every classified, air-gapped network in search of license infringements?

I wouldn't. I'd hire some Peter Gibbons type, who only does about 15 minutes of real, actual work in a typical week. Then I'd tell them they can finish early if all their pending cases are closed.

Re:We built an air-gapped Jira alternative for regulated ind... by bobmcnamara on Tuesday July 22, 2025 @08:26PM (#44654490)
Practically the federal government shouted, Neener neener neener! Rules for thee but not for meeeeeee!

https://arstechnica.com/tech-policy/2008/08/air-force-cracks...

Re:We built an air-gapped Jira alternative for regulated ind... by atonse on Wednesday July 23, 2025 @05:00PM (#44663994)
The acquisition and procurement departments in many government agencies are often “independent” in that they don’t directly report to the agency. They’re more like compliance people that make sure you’re completing with the procurement laws and regulations.

And unpaid software licenses are a violation.

Now maybe the client in this case may have had some kind if ownership clause, etc. but in general, procurement people tend to be pretty neutral in my experience.

Then again, over only dealt with small contracts (< $500k)

Re:We built an air-gapped Jira alternative for regulated ind... by GabeIsko on Wednesday July 23, 2025 @05:38PM (#44664319)
If enterprise corporations actually did a throughout investigation, they would probably find that a lot of their license deals have gone unfulfilled. They are really bad about this kind of stuff. It became super complicated to buy this kind of software once companies realized that they could force everything though a deal desk and try to extract as much money out of the government as possible.

We have had companies outright refuse to even give us a price when we told them we wanted to investigate buying a license. Such a PITA.

Re:We built an air-gapped Jira alternative for regulated ind... by bobmcnamara on Tuesday July 22, 2025 @08:25PM (#44654488)
https://arstechnica.com/tech-policy/2008/08/air-force-cracks...

Hopefully this was fixed, but this was the standing precedent at the time.

Re:We built an air-gapped Jira alternative for regulated ind... by unethical_ban on Tuesday July 22, 2025 @09:02PM (#44654703)
As soon as I saw that he put it on the employer machines at his own work before locking down a sale, they'd screw him whether he deserved it or not.
Re:We built an air-gapped Jira alternative for regulated ind... by bigfatkitten on Tuesday July 22, 2025 @06:16PM (#44653615)
Sounds like having only one paying customer was the real cause of the business’s failure.
Re:We built an air-gapped Jira alternative for regulated ind... by bobmcnamara on Tuesday July 22, 2025 @08:30PM (#44654512)
They've mentioned that was a valuable lesson.
Re:We built an air-gapped Jira alternative for regulated ind... by Cthulhu_ on Wednesday July 23, 2025 @04:45AM (#44657018)
Surely that would fail any kind of security or compliance audit?
Re:We built an air-gapped Jira alternative for regulated ind... by bobmcnamara on Wednesday July 23, 2025 @03:18PM (#44662902)