Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ServiceNow Insecure Access Control to Full Admin Takeover

x64.sh

Post reply on HN
Print view View original

11–20 of 81 posts

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#11

Post by robertlagrant »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

When it started it was the great hope vs the incumbents. I never used it, but it used to be very well thought of.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#12

Post by wintogreen74 »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

>> Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow.

Forget about their enterprise software, the very premise of the function they support is the thing I hate most. The software, the company, the consultants who push this garbage, the employees within your company who somehow have a named role implementing and managing it, I loathe it all.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#13

Post by closeparen »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

Something I've been mulling over for a while: security vulnerabilities are basically the original developers getting outsmarted, caught out being careless. Even a very skilled, careful team might ship bugs that have security implications. But low-skilled, careless teams are definitely doing this. All buggy software is also vulnerable. There is no such thing as low-quality but secure.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#14

Post by genmud »

NikolaNovak wrote: post #7
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

What makes it so bad? We are likely to get it next year . I feel it cannot be worse than the aberration we are currently using but I could be wrong :-/

You could be wrong... I worked at a place where we had like 20-30 different ERPs and they got SAP as a way to centralize the entire thing on one platform. However, during the migration they managed to recreate interfaces that resembled the old workflows people were used to, effectively having 20-30 customized SAP UIs with a common backend.

It became such a clusterfuck the vendor (SAP) who we paid MASSIVE amounts of money to, wouldn't support their own software.

Thanks for coming to my TED talk, try to run as vanilla as possible.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#16

Post by maximinus_thrax »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

> People talk shit about it all day, every day.

In my two-decade long career, I don't think I ever heard about any enterprise software for which that statement is false.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#17

Post by inferiorhuman »

NikolaNovak wrote: post #7
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

What makes it so bad? We are likely to get it next year . I feel it cannot be worse than the aberration we are currently using but I could be wrong :-/

We used it locally at megacorp in place of the standard JIRA instance. As an end user I disliked it because it was painfully slow and the interface was awful. It broke browser navigation, if there were permalinks they were nearly impossible to find so most things couldn't easily be bookmarked, filtering was tedious and unintuitive. Some coworkers tried to write CLI tools and the API turned out to be as awkward as the web UI.

Ideally we would've just thrown more money at CloudBees, but there was no political will to fight for another paid JIRA instance. I'm sure there are worse tools than snow but I'd just as soon never use it again.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#19

Post by Karrot_Kream »

NikolaNovak wrote: post #10
vxNsr wrote: post #9

Earlier quoted context omitted.

It’s secret super power for executives is GQL it’s easier to use vs SQL and the interface looks slick compared to what’s out there. A very well architected instance looks and is pretty good, the issue is that often large enterprises will hire the cheapest possible consulting firm to implement it, and you can really screw it up if you’re not careful.

My background is ERP so that sounds similar then - the bones may be decent, but how you implement it can make or break it, both as IT exercise and as business transformation / process implementation; is that About right? I will likely have some input on how it's implemented and particularly the processes. I guess I should start reading up on best practices etc...

This seems to be the big problem with ERPs. Problem domains are complex so you need implementation flexibility, but with that comes the ability to create shitty systems that everyone hates.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#20

Post by solresol »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

You should have seen the platform it replaced. ServiceNow was essentially "let's rewrite HP Service Manager from scratch to remove the legacy debt." Service Manager was what you get when you develop a mainframe green screen application using a low-code RAD system and then try to maintain it for 20 years.

Amusingly, I'm consulting with a company now whose business model and product strategy is "a rewrite of Service Manager that's cheaper and more sane." Presumably the cycle of rewriting these kinds of platforms will continue until the heat death of the universe.

Post reply on HN