[deleted]
We built an air-gapped Jira alternative for regulated industries
181–190 of 201 posts
Re: We built an air-gapped Jira alternative for regulated industries
#182Re: We built an air-gapped Jira alternative for regulated industries
#183Re: We built an air-gapped Jira alternative for regulated industries
#184Earlier quoted context omitted.
I can't believe how many devs think dependancies are completely cost free...
I don’t get it, the dependencies are either needed or not. If needed that are either pulled from a project or written. So how are dependencies evil , is the rage against feature bloat pulling in dependencies ? Then the issue is the bloat
This topic is beaten to death in Philosophy of Software Design - I really, really do recommend it.
Re: We built an air-gapped Jira alternative for regulated industries
#185After a U.S. federal contractor told us they loved Plane but couldn't use it due to ITAR requirements, we spent 6 months building a truly air-gapped version. No external connections, no license pings, no telemetry, everything runs in complete isolation. The interesting part: our air-gapped deployment actually runs faster than our SaaS version. Turns out when you eliminate all network latency, things get snappy. This…
> Turns out when you eliminate all network latency, things get snappy. Same experience with JIRA. I read all these negative comments here and elsewhere about how slow and clunky JIRA was, and I couldn't relate at all. Then I realized all those who complained was using JIRA Cloud and we were using on-prem, and it all made sense. We've since moved to JIRA Cloud ourselves, and I understand now. We moved and none of the…
I contracted with a company that used an on-prem version of Jira. Their instance was painfully slow over VPN and I often wondered why they didn't add more resources thinking that this was the experience for everyone. Then I went on-site for a few days and the performance was night and day. On-prem, their Jira instance was the fastest I've ever seen, faster than the cloud version and felt snappier than Trello.
On-prem is great if everyone is coming into the office, but I think orgs should pay more attention to the "remote experience" of their on-prem tools.
Re: We built an air-gapped Jira alternative for regulated industries
#186Earlier quoted context omitted.
Functionality is either needed or it isn't, but it doesn't need to come from an external dependency. When it does, it probably comes with functionality you didn't need too. And as soon as you have a compile/runtime dependency on external code, your compile/execution environment needs to always have access to third party code. So that's bloat and complexity. You also give up control. Hopefully it ends up saving a bunc…
Hopefully an upgrade to an external library doesn't end up including another dependancy that happens to include some backdoor that steals all the credit card information in your database. Or a crypto miner in frontend code. Or introduces a bug that stops people from being able to checkout. Or the money package starts calculating slightly differently than your payments provider... Etc. etc.
Or even just plain remove the API you were using in yet another redesign.
Re: We built an air-gapped Jira alternative for regulated industries
#187I think we have different definitions of the term "air-gapped". Users still very much connect to it using a network. This just doesn't phone home (or elsewhere). A truly airgapped Jira-alternative would be somewhat impractical.
Why? I use to manage one on a classified air-gapped network, back before Atlassian was all Cloud Based or 'Data Center' license junk. We had Stash, Jira, Confluence, FishEye, HipChat, everything hosted on a non-internet connected network.
Re: We built an air-gapped Jira alternative for regulated industries
#188I think we have different definitions of the term "air-gapped". Users still very much connect to it using a network. This just doesn't phone home (or elsewhere). A truly airgapped Jira-alternative would be somewhat impractical.
If the local network as a whole can do work, connect to the Kira-alternative for their work, but the network is isolated from the internet - then it counts as airgapped IMO.
Re: We built an air-gapped Jira alternative for regulated industries
#189Earlier quoted context omitted.
Years back a friend of mine's startup failed when USAF pirated their software and the original customer org stopped paying for it. Feds are DMCA immune, so no real recourse.
Surely that would fail any kind of security or compliance audit?
This was the precedent at the time: https://arstechnica.com/tech-policy/2008/08/air-force-cracks...
Re: We built an air-gapped Jira alternative for regulated industries
#190Earlier quoted context omitted.
This seems very suspect. Usually you do have recourse via procurement channels and reps. If you file a complaint with that agency stating that they’re using a license without paying for it, it will result in at least an investigation.
If you got to hire the cops to investigate your own mistakes, would you hire competent, motivated folks who'd leave no stone unturned and get access to every classified, air-gapped network in search of license infringements? I wouldn't. I'd hire some Peter Gibbons type, who only does about 15 minutes of real, actual work in a typical week. Then I'd tell them they can finish early if all their pending cases are closed…
The acquisition and procurement departments in many government agencies are often “independent” in that they don’t directly report to the agency. They’re more like compliance people that make sure you’re completing with the procurement laws and regulations.
And unpaid software licenses are a violation.
Now maybe the client in this case may have had some kind if ownership clause, etc. but in general, procurement people tend to be pretty neutral in my experience.
Then again, over only dealt with small contracts (< $500k)