Atlassian Rovo Exfiltrates Data, Bypassing Controls
promptarmor.com
Atlassian Rovo Exfiltrates Data, Bypassing Controls
1–10 of 148 posts
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#2> Rovo's URL retrieval tool is insecure: there are no protections against opening a URL that has been dynamically created by the agent. Here, Rovo is manipulated to append sensitive data to an attacker's URL. When Rovo calls the insecure tool to open the URL, the attacker's site logs the request, including the appended sensitive data.
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#3Atlassian has gone from a trusted enterprise-partner to a complete shit-show in just 18 months. This surprises nobody. There will be classes taught in how to fuck up a good business and Atlassian will be the prime example.
Regards, /someone who migrated 3500 users from Atlassians products recently due to their "cloud only"-bullshit.
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#4~every ai vulnerability write up boils down to "just ask it do to the thing", but with fancier terms like "indirect prompt injection".
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#5I can’t get over how bad “Rovo” is. Somehow more aggressive and useless than Microsoft putting “Copilot” everywhere.
It’s objectively worse than using something like Cowork + MCP, AND they injected it into every single page on JIRA and Confluent which has made web browsing way slower while all the junk is loading.
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#6Atlassian has gone from a trusted enterprise-partner to a complete shit-show in just 18 months. This surprises nobody. There will be classes taught in how to fuck up a good business and Atlassian will be the prime example. Regards, /someone who migrated 3500 users from Atlassians products recently due to their "cloud only"-bullshit.
I started to consider it a show show way earlier than 18 months ago. Jira is so terrible to use that it is hard to phantom how they are able to be paid for their product
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#7It's nice they force rovo now for document/version diff's. Because you need to burn down the rainforest for those. (sarcasm ... for obvious reasons)
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#8Atlassian has gone from a trusted enterprise-partner to a complete shit-show in just 18 months. This surprises nobody. There will be classes taught in how to fuck up a good business and Atlassian will be the prime example. Regards, /someone who migrated 3500 users from Atlassians products recently due to their "cloud only"-bullshit.
You'd have to look at their profit numbers. They have a huge captive base of customers, like Adobe it might take decades for things to get bad enough and alternatives to arise before their profitability is impacted. And the executives who benefit will have cashed out long before then.
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#9[deleted]
Re: Atlassian Rovo Exfiltrates Data, Bypassing Controls
#10I can’t get over how bad “Rovo” is. Somehow more aggressive and useless than Microsoft putting “Copilot” everywhere. It’s objectively worse than using something like Cowork + MCP, AND they injected it into every single page on JIRA and Confluent which has made web browsing way slower while all the junk is loading.
Have you seen the markdown agent instructions they provide in their new agentic `twg` cli? 70k tokens one average, there are more than one...
Rovo is the worse Ai I have used, I suggested they stop trying and let us have model choice. Save money and don't do things out of their skill sets