Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ServiceNow Insecure Access Control to Full Admin Takeover

x64.sh

Post reply on HN
Print view View original

51–60 of 81 posts

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#51

Post by sublinear »

NikolaNovak wrote: post #26
wintogreen74 wrote: post #12

Earlier quoted context omitted.

>> Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. Forget about their enterprise software, the very premise of the function they support is the thing I hate most. The software, the company, the consultants who push this garbage, the employees within your company who somehow have a named role implementing and managing it, I loathe it all.

interesting; curious - What is the thing you hate the most here? FWIW, I've been a kind of sysadmins for couple of decades, then ops manager for 5. After supporting multiple production streams, good and organized and consistent processes are an absolute must for me (as opposed to random wild west and utter chaos sometimes we techie prefer :-)). It is my understanding "premise of function they support" is organized wo…

My guess is they underestimate the scale at which it's used in most businesses who do and the relative unimportance of the accuracy of the data it holds. It's never going to perfectly capture all details of work because of its inflexibility, but it's better than nothing or not even trying. As long as everyone understands that and nobody is delusionally running around with a trusty clipboard and a whip or rallying for significant change based on it without consulting the people actually entering the data, it's alright.

There's a lot to keep track of. Definitely not my cup of tea either, but it is what it is.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#52

Post by notyourwork »

mc32 wrote: post #47
Aeolun wrote: post #28

Earlier quoted context omitted.

There must be some other platform that’s better than servicenow that does the same thing. I find it hard to believe this grotesque abomination is the state of the art in IT management.

No, there isn’t. They all have pros and cons but none overall are “better”. ServiceNow is for large orgs with independent departments/orgs who need to use it differently. There’s BMC/Remedy but it’s just as convoluted and worse. Also Clarity used to be there. There are many that are better at one one or two specific functions, sure. But none that have all the added features a large mature org would need.

Comparing remedy and ServiceNow is a bit like comparing cable television with Netflix.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#53

Post by JimmyRuska »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

The stock trades like some crypto alt coin from the promised land

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#54

Post by kneebonian »

NikolaNovak wrote: post #7
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

What makes it so bad? We are likely to get it next year . I feel it cannot be worse than the aberration we are currently using but I could be wrong :-/

The best answer I can give you is that if you guys get it fully implemented next year you'll be able to have the first screen load, and if you're lucky run a query to completion the year after that.

Not because you need to implement anything, or configuration reasons. That's just how long it takes to do basic things.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#55

Post by runlevel1 »

chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

Enterprises want software that they can bend to conform to their entrenched, arcane business processes. But no two enterprises are alike. And meeting the needs of the lowest common denominator doesn't sell units.

So you risk falling into the trap of trying to do everything for everyone but doing nothing well.

You can only stuff so much shit into a cornucopia before it becomes more of a garbage bin.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#56

Post by brazzledazzle »

wharfjumper wrote: post #48
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

Can you elaborate? A customer is in the process of implementing (Tokyo version?) it and it seems to have an intuitive, responsive UI. I'm judging it against Atlassian and Oracle EBS so I have low expectations.

I don’t know what version I used to use but I wouldn’t have called the UI intuitive or responsive. It was randomly buggy from a workflow perspective too. Like resources getting stuck in a weird limbo. Conditions would be met but not visible by the condition evaluator. Or queries failing to find anything but later work. It could be somewhat awful at times but I don’t think it was as terrible as Remedy... but what is?

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#57

Post by Spooky23 »

mongol wrote: post #35
solresol wrote: post #20

Earlier quoted context omitted.

You should have seen the platform it replaced. ServiceNow was essentially "let's rewrite HP Service Manager from scratch to remove the legacy debt." Service Manager was what you get when you develop a mainframe green screen application using a low-code RAD system and then try to maintain it for 20 years. Amusingly, I'm consulting with a company now whose business model and product strategy is "a rewrite of Service Ma…

I recall that once upon a time, Service Manager was a client side app using the same GUI framework as Eclipse. Which made it very heavy, using tons of memory for an app that you only used now and then. I am not completely sure it was Service Manager, but quite sure. Then it was made a web app, 15+ years or so ago. Compared to that, ServiceNow is a dream to use.

The young pups here whining about ServiceNow have no idea.

Service Manager, Remedy, etc were exponentially more miserable. I worked at a place that had 6 people who just twiddled Service Manager and kept the servers running etc.

All ticketing systems suck. It’s the nature of the beast. People used to talk about how awesome JIRA is. Lol.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#58

Post by Sylamore »

genmud wrote: post #14
NikolaNovak wrote: post #7

Earlier quoted context omitted.

What makes it so bad? We are likely to get it next year . I feel it cannot be worse than the aberration we are currently using but I could be wrong :-/

You could be wrong... I worked at a place where we had like 20-30 different ERPs and they got SAP as a way to centralize the entire thing on one platform. However, during the migration they managed to recreate interfaces that resembled the old workflows people were used to, effectively having 20-30 customized SAP UIs with a common backend. It became such a clusterfuck the vendor (SAP) who we paid MASSIVE amounts of m…

>try to run as vanilla as possible.

I can't emphatically agree with this enough.

I've worked on a Siebel 7.5 installation that was so heavily customized by a certain DBS TV company that it's still running to this day because upgrading to a current release means starting over from scratch. There are efforts underway to migrate it to SalesForce but that's been in progress for 3 years and still not far enough along to cut over.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#59

Post by Spooky23 »

wharfjumper wrote: post #48
chevman wrote: post #4

Of all the shitty enterprise software vendors, there is no platform I hate more than ServiceNow. What an abomination of something seemingly so simple made into something so horrendously complex and bloated. I was trying to explain to some new ServiceNow AE why we wouldn't be buying more product from them. Literally everyone who uses the product hates it - developers, admins, end users. It behaves like it is constantl…

Can you elaborate? A customer is in the process of implementing (Tokyo version?) it and it seems to have an intuitive, responsive UI. I'm judging it against Atlassian and Oracle EBS so I have low expectations.

Customers make stupid customizations that break it. Especially older implementations.

Also help desk is the first use case, nobody wants to give the helpless level 1 people any changes, as it’s an excuse not to perform.

Re: ServiceNow Insecure Access Control to Full Admin Takeover

#60

Post by Sylamore »

pm2222 wrote: post #32

My vote goes to snow it’s much better than servicecenter and remedy. I’m a user only not admin or dev.

Eh, Remedy has lots of issues but I'd take it over "SNow" any day - at least it's easy to build CLI tools or API calls into Remedy. I'm neither an admin or user of either, just an end user.
Post reply on HN