Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ServiceNow Insecure Access Control to Full Admin Takeover

x64.sh

Post reply on HN
Print view View original

21–30 of 81 posts

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#21

Post by bgm1975 »

clivestaples wrote: post #6
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

I worked there for exactly two months. After 15 days, I could not receive another offer and put in my notice fast enough. Ended up giving them four days. And I'm usually very careful about not burning bridges.

Can you elaborate more about what you saw/experienced there?

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#22

Post by SteveNuts »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

Have you ever heard of Cherwell?

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#23

Post by notyourwork »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

I think you have a skewed perception of value add. ServiceNow conquered the software as a service industry like no other and will be around for decades to come.

Developers and Admins may not like it because its development with bumpers for kids. End users dislike it because of the developers and admins. There may be some worth looking in the mirror to be had before you point the finger at a software platform for short comings within the organization.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#24

Post by notyourwork »

vxNsr wrote: post #9
NikolaNovak wrote: post #7

Earlier quoted context omitted.

What makes it so bad? We are likely to get it next year . I feel it cannot be worse than the aberration we are currently using but I could be wrong :-/

It’s secret super power for executives is GQL it’s easier to use vs SQL and the interface looks slick compared to what’s out there. A very well architected instance looks and is pretty good, the issue is that often large enterprises will hire the cheapest possible consulting firm to implement it, and you can really screw it up if you’re not careful.

100% this - I used to do enterprise integrations in the early days of ServiceNow. It's not a bad platform, consulting companies can suck (most do) and in-house implementations usually suck for different reasons.

ServiceNow is a combination of data modeling, interface and process design along with carefully balancing how to do things. Most of my time was in the CMS and SOAP integrations.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#25

Post by NikolaNovak »

genmud wrote: post #14
NikolaNovak wrote: post #7

Earlier quoted context omitted.

What makes it so bad? We are likely to get it next year . I feel it cannot be worse than the aberration we are currently using but I could be wrong :-/

You could be wrong... I worked at a place where we had like 20-30 different ERPs and they got SAP as a way to centralize the entire thing on one platform. However, during the migration they managed to recreate interfaces that resembled the old workflows people were used to, effectively having 20-30 customized SAP UIs with a common backend. It became such a clusterfuck the vendor (SAP) who we paid MASSIVE amounts of m…

Thanks, appreciate the perspective. But I've been implementing peoplesoft for, dear god, quarter of a century now, so I'm familiar with that unfortunate pattern. I guess I'm more wondering is service now inherently so bad it's unsalvageable, or is it a matter of good vs bad implementation, and resulting business transformation (or lack thereof :).

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#26

Post by NikolaNovak »

wintogreen74 wrote: post #12
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

>> Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. Forget about their enterprise software, the very premise of the function they support is the thing I hate most. The software, the company, the consultants who push this garbage, the employees within your company who somehow have a named role implementing and managing it, I loathe it all.

interesting; curious - What is the thing you hate the most here?

FWIW, I've been a kind of sysadmins for couple of decades, then ops manager for 5. After supporting multiple production streams, good and organized and consistent processes are an absolute must for me (as opposed to random wild west and utter chaos sometimes we techie prefer :-)). It is my understanding "premise of function they support" is organized work flows - standard and "let's not reinvent the wheel badly" ways to manage and report on incidents, service requests, etc. And hopefully do some trends and reporting and categories and whatnots.

So I don't know if service now does that well or poorly... But what in there do you "loathe"?? It may not be your cup of tea and you'd rather develop freely, and fair enough, but somebody somewhere has to support large productions and large numbers of users and need tools better than slack and emails to do it... :-/

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#27

Post by yoyoyo1122 »

notyourwork wrote: post #23
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

I think you have a skewed perception of value add. ServiceNow conquered the software as a service industry like no other and will be around for decades to come. Developers and Admins may not like it because its development with bumpers for kids. End users dislike it because of the developers and admins. There may be some worth looking in the mirror to be had before you point the finger at a software platform for shor…

> Developers and Admins may not like it because its development with bumpers for kids. End users dislike it because of the developers and admins.

As a current ServiceNow developer for a F500 company, this is so true. Developing is frustrating since they strive for low/no code. They only started allowing ECMA6 like last year and it's still extremely limited.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#28

Post by Aeolun »

notyourwork wrote: post #23
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

I think you have a skewed perception of value add. ServiceNow conquered the software as a service industry like no other and will be around for decades to come. Developers and Admins may not like it because its development with bumpers for kids. End users dislike it because of the developers and admins. There may be some worth looking in the mirror to be had before you point the finger at a software platform for shor…

There must be some other platform that’s better than servicenow that does the same thing.

I find it hard to believe this grotesque abomination is the state of the art in IT management.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#29

Post by Aeolun »

maximinus_thrax wrote: post #16
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

> People talk shit about it all day, every day. In my two-decade long career, I don't think I ever heard about any enterprise software for which that statement is false.

We use Slack, which is pretty decent. We also use Github, which has been historically great.

There’s Bulas, which is a timekeeping application developed somewhere in 1995 (I think) that’s just server rendered HTML and is a joy to use (especially compared to the other piles of crap).

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#30

Post by technion »

frakt0x90 wrote: post #2

Almost exactly a year from report to disclosure. I'm sure it varies a lot, but is that a normal timeline for something this severe?

My experience with this sort of enterprise software is that if you are a user, there is usually someone higher up the org chart than you that is worried such a disclosure will damage his relationship with his mate. My point being, much like Oracle, the usual timeline is that you never go public.
Post reply on HN