kevcampb
Joined 14 years ago
Karma
2,163
Submissions
171
Member since
Nov 14
Contact: [email protected]
View on Hacker NewsRecent submissions
Comment · 2 days ago
Seems it was not the official Anthropic plugin, the article has been revised
Comment · 2 days ago
Anthropic's supply chain potentially being compromised feels like it should be bigger news
Comment · 2 months ago
Any recommendations for alternatives for just Confluence and JIRA?
I've been looking at switching to Notion and Linear, but just haven't had the time to complete evaluation.
Comment · 2 months ago
Worth reminding everyone of previous discussion when Atlassian opted-in all customers by default for their data to be used for model training.
https://news.ycombinator.com/item?id=47833247
This goes live on August 17. If you haven't switched it off your company IP will be used to train their future models.
Comment · 5 months ago
They've just been released
https://security.snyk.io/vuln/SNYK-DEBIAN13-NGINX-16732761
https://security.snyk.io/vuln/SNYK-ALPINE323-NGINX-16722461
So it seems that Snyk is taking almost a week to get advisories out for an RCE
Comment · 5 months ago
It seems that Snyk isn't picking this up on our docker images. They have a vulnerability published for the nginx binary itself.
https://security.snyk.io/vuln/SNYK-UNMANAGED-NGINX-16679754
But they've not released any vulnerability for the Alpine or Debian packages.
Does anyone know what's happening here? Seems concerning that there's a 2 day old RCE not being picked up.
Comment · 5 months ago
That's on Google apps, that's not on Chrome. That's not Chrome sending your browsing data or content from inside webpages to Google.
Comment · 5 months ago
This seems somewhat specious - it's also quite possible that they just altered the wording to make it less verbose. Does anyone have access to the link "Learn more about on-device AI"?
If Chrome starts sending data from the browser back to Google, that's going to be a huge compliance issue. If you work for a company that processes customer data in the browser, you're going to need to ban Chrome.
Comment · 6 months ago
"Your available data contribution settings will be available no later than May 19, 2026."
So let me guess, they're hoping that we forget about this by then, so that they can scoop up our data? I can't think any other reason for it.
Comment · 6 months ago
Unfortunately that one has a subheading of "From August 17, the outfit will collect customer metadata by default unless you pay for the top tier"
It's not just metadata, it's all "in-app data"
Comment · 6 months ago
I really wish I could find a better source to link to for this. By default, all free and paid customers are being opted-in to their data being used for AI training.
All your Confluence pages, Jira tickets, etc.
https://support.atlassian.com/security-and-access-policies/d... describes how to disable this, but it also appears that the setting to disable this doesn't exist (it's not visible on any of our instances).