Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We built an air-gapped Jira alternative for regulated industries

plane.so

Post reply on HN
Print view View original

191–200 of 201 posts

Re: We built an air-gapped Jira alternative for regulated industries

#191

Post by GabeIsko »

bowsamic wrote: post #147
vosper wrote: post #5

Earlier quoted context omitted.

> cloud-only tools like Jira. But Jira is not cloud-only? https://www.atlassian.com/enterprise/data-center

Atlassian actually threatened to sue our company if we didn't move from on-prem to cloud. I imagine they're doing the same to others

There has historically been massive investor and shareholder pressure for companies to show "Cloud Recurring Revenue" and multiple wall street analysts will start issuing higher price points for your stock based on this, and eventually large institutional investor adjust their positions accordingly.

I like the cloud for a lot of reasons. But, making your software worse to make your stock price higher seems like a loser for everyone long term.

Re: We built an air-gapped Jira alternative for regulated industries

#192

Post by GabeIsko »

michaelt wrote: post #81
atonse wrote: post #53

Earlier quoted context omitted.

This seems very suspect. Usually you do have recourse via procurement channels and reps. If you file a complaint with that agency stating that they’re using a license without paying for it, it will result in at least an investigation.

If you got to hire the cops to investigate your own mistakes, would you hire competent, motivated folks who'd leave no stone unturned and get access to every classified, air-gapped network in search of license infringements? I wouldn't. I'd hire some Peter Gibbons type, who only does about 15 minutes of real, actual work in a typical week. Then I'd tell them they can finish early if all their pending cases are closed…

If enterprise corporations actually did a throughout investigation, they would probably find that a lot of their license deals have gone unfulfilled. They are really bad about this kind of stuff. It became super complicated to buy this kind of software once companies realized that they could force everything though a deal desk and try to extract as much money out of the government as possible.

We have had companies outright refuse to even give us a price when we told them we wanted to investigate buying a license. Such a PITA.

Re: We built an air-gapped Jira alternative for regulated industries

#193

Post by andy_ppp »

thfuran wrote: post #186
andy_ppp wrote: post #178

Earlier quoted context omitted.

Hopefully an upgrade to an external library doesn't end up including another dependancy that happens to include some backdoor that steals all the credit card information in your database. Or a crypto miner in frontend code. Or introduces a bug that stops people from being able to checkout. Or the money package starts calculating slightly differently than your payments provider... Etc. etc.

Or even just plain remove the API you were using in yet another redesign.

Which version of react-router are we on by now? Surely it must be done by now :-/

Re: We built an air-gapped Jira alternative for regulated industries

#194

Post by defrost »

h4ckerle wrote: post #126
defrost wrote: post #93

Earlier quoted context omitted.

There are other ways, of course. * air-gap malware can be designed to communicate secure information acoustically, at frequencies near or beyond the limit of human hearing. * In 2014, researchers introduced ″AirHopper″, a bifurcated attack pattern showing the feasibility of data exfiltration from an isolated computer to a nearby mobile phone, using FM frequency signals. * In 2015, "HELLONE", a covert signaling channe…

Don't forget Stuxnet which crossed the airgap via infecting USB Devices. https://en.wikipedia.org/wiki/Stuxnet

Not forgotten at all, deliberately unmentioned as I focused on crossing the air gap by means other than:

  The only way to move data to and from them is for someone to walk across the gap with physical media.
Stuxnet was walked across via physical media (USB drives).

Re: We built an air-gapped Jira alternative for regulated industries

#195

Post by sam_bristow »

bigmattystyles wrote: post #100
magicalhippo wrote: post #7

Earlier quoted context omitted.

> Turns out when you eliminate all network latency, things get snappy. Same experience with JIRA. I read all these negative comments here and elsewhere about how slow and clunky JIRA was, and I couldn't relate at all. Then I realized all those who complained was using JIRA Cloud and we were using on-prem, and it all made sense. We've since moved to JIRA Cloud ourselves, and I understand now. We moved and none of the…

The other thing, every pm wants a custom field just for their project, a field they’ll forget they asked for a day later. TLDR, put a governance board that’s fine saying no especially when someone inevitably pulls rank.

Apparently System-scope custom fields have a significant performance hit in Jira. I think project-scope custom fields are better.

Sometimes it feels like Jira is so incredibly configurable but is really missing the "pit of success". There is a way to make it nice to use and reasonably performant, but you really need to go into it with a strong plan. And even then it's really easy to balls it all up in short order if you're not vigilant.

Re: We built an air-gapped Jira alternative for regulated industries

#196

Post by time4tea »

So much of this is just normal stuff anyway, right? Signing CI output, tracking dependencies, using bundled resources..

Bit-for-bit reproducible builds are definitely doable, but mean including build dates is tricky, and care needs to be taken with archival file ordering.

Is this such a big departure from the norm? Curious what constitutes normal!

Re: We built an air-gapped Jira alternative for regulated industries

#198

Post by rendall »

degamad wrote: post #74
rendall wrote: post #49

> This post explores the journey of building this specialized deployment option for regulated industries where data sovereignty isn't just preferred—it's mandatory. This is an AI writing tell: "It's not just x—it's y." https://youtu.be/9Ch4a6ffPZY

It's an AI writing tell that was copied from so many of us who use it.

Literally no one use that construction with an em dash unless they are using AI to write their copy.

Re: We built an air-gapped Jira alternative for regulated industries

#199

Post by rendall »

devanshuarora wrote: post #134
rendall wrote: post #49

> This post explores the journey of building this specialized deployment option for regulated industries where data sovereignty isn't just preferred—it's mandatory. This is an AI writing tell: "It's not just x—it's y." https://youtu.be/9Ch4a6ffPZY

To be fair, “not just X—it’s Y” showed up in product marketing way before AI started parroting it. Just saying. :)

Indeed. Marketers took the time to find the key combo that places an em dash. No one else does that. Except AI.

It’s not just a typographic choice—it’s a tell!

Re: We built an air-gapped Jira alternative for regulated industries

#200

Post by dragonwriter »

rendall wrote: post #199
devanshuarora wrote: post #134

Earlier quoted context omitted.

To be fair, “not just X—it’s Y” showed up in product marketing way before AI started parroting it. Just saying. :)

Indeed. Marketers took the time to find the key combo that places an em dash. No one else does that. Except AI. It’s not just a typographic choice—it’s a tell!

> Marketers took the time to find the key combo that places an em dash. No one else does that.

Pretty much everything that is professionally published does, and lots of people who care about typography do, that.

Post reply on HN