frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Atlassian Rovo Exfiltrates Data, Bypassing Controls

https://www.promptarmor.com/resources/atlassian-rovo-exfiltrates-data
46•hackerBanana•1h ago

Comments

formerly_proven•58m ago
> Rovo's URL retrieval tool is insecure: there are no protections against opening a URL that has been dynamically created by the agent. Here, Rovo is manipulated to append sensitive data to an attacker's URL. When Rovo calls the insecure tool to open the URL, the attacker's site logs the request, including the appended sensitive data.
khanan•53m ago
Atlassian has gone from a trusted enterprise-partner to a complete shit-show in just 18 months. This surprises nobody. There will be classes taught in how to fuck up a good business and Atlassian will be the prime example.

Regards, /someone who migrated 3500 users from Atlassians products recently due to their "cloud only"-bullshit.

gbalduzzi•39m ago
I started to consider it a show show way earlier than 18 months ago. Jira is so terrible to use that it is hard to phantom how they are able to be paid for their product
mosura•20m ago
Jira is how it is because almost any product that grows to be that flexible will develop the same problems.

They failed to rearchitect it to something suitable for the inherent flexibility though, so it remains a disaster area, but one that is uniquely able to fit the whims of any manager that can then mandate it for everyone else.

yborg•33m ago
You'd have to look at their profit numbers. They have a huge captive base of customers, like Adobe it might take decades for things to get bad enough and alternatives to arise before their profitability is impacted. And the executives who benefit will have cashed out long before then.
walrus01•18m ago
Recently saw an example of somebody who vibe coded a tool to mass export the contents of a 'Confluence' wiki into an instance of self hosted mediawiki, preserving everything.

Mediawiki as a whole has a feature set that 95% of organizations will only scratch the surface of. There's a ridiculous number of possible plugins and customization if you have somebody who knows what they're doing with it.

The majority of companies that need an internal KB/wiki do not have as complex needs or use cases as wikipedia itself or the wikimedia foundation.

john_strinlai•46m ago
~every ai vulnerability write up boils down to "just ask it do to the thing", but with fancier terms like "indirect prompt injection".
pram•45m ago
I can’t get over how bad “Rovo” is. Somehow more aggressive and useless than Microsoft putting “Copilot” everywhere.

It’s objectively worse than using something like Cowork + MCP, AND they injected it into every single page on JIRA and Confluent which has made web browsing way slower while all the junk is loading.

verdverm•24m ago
Have you seen the markdown agent instructions they provide in their new agentic `twg` cli? 70k tokens one average, there are more than one...

Rovo is the worse Ai I have used, I suggested they stop trying and let us have model choice. Save money and don't do things out of their skill sets

jerf•19m ago
Rovo has my favorite example of AI misfeature. Just checked, it's still there in Cloud Confluence. In Edit mode for a page, you can select a range of text and a menu will pop up, with Ask Rovo being a drop down on it. There's a few good options... Improve Formatting, translation options, Make Shorter...

... but it also has Make Longer. Yes, a built-in feature to type some text in, and the use the mighty power of AI to bloat it.

Naturally, you can repeat this process several times on the same text, for your own little personal demonstration of what model collapse looks like in real time.

consp•34m ago
It's nice they force rovo now for document/version diff's. Because you need to burn down the rainforest for those. (sarcasm ... for obvious reasons)

Discovery Loop

https://www.discoveryloop.com/
317•xtreak29•3h ago•185 comments

Zed DeltaDB

https://zed.dev/deltadb
39•ahamez•28m ago•4 comments

Born Against, or why hobby programming communities are against LLM usage

https://blog.fogus.me/llm/born-against.html
36•lladnar•43m ago•21 comments

Beating GPT-5.6 Sol on retrieval with 100x cheaper open models

https://neon.com/blog/how-castform-neon-beats-frontier-models-on-price-and-efficiency
41•moonikakiss•1h ago•6 comments

Changes at Google DeepMind: Demis Hassabis from CEO to Chair, Jeff Dean departs

https://blog.google/company-news/inside-google/message-ceo/next-chapter-ai-momentum/
163•colesantiago•3h ago•318 comments

Atlassian Rovo Exfiltrates Data, Bypassing Controls

https://www.promptarmor.com/resources/atlassian-rovo-exfiltrates-data
51•hackerBanana•1h ago•11 comments

GNU Hurd News 2026-Q2

https://www.gnu.org/software/hurd/news/2026-q2.html
31•plaguna•3d ago•8 comments

Sycophantic AI Decreases Prosocial Intentions and Promotes Dependence (2025)

https://arxiv.org/abs/2510.01395
14•robin_reala•1h ago•1 comments

Launch HN: HyperProbe (YC S26) – Agents that do read-only debugging in prod

https://www.hyperprobe.co
25•shailendraht•2h ago•17 comments

Western Sahara

https://en.wikipedia.org/wiki/Western_Sahara
77•brudgers•20h ago•40 comments

The Valley of Webhooks

https://weli.dev/blog/the-valley-of-webhooks/
71•weli•3h ago•31 comments

Phishers are hijacking legitimate cloud infrastructure

https://securelist.com/cloud-platforms-in-phishing/120832/
21•lschueller•2h ago•5 comments

Cloudflare OS: an open platform for agents, apps, and work

https://blog.cloudflare.com/cloudflare-os/
353•speckx•5h ago•197 comments

The Entropy of a Markov Chain

https://chillphysicsenjoyer.substack.com/p/the-entropy-of-a-markov-chain
70•surprisetalk•5h ago•2 comments

Discovery of a multicomponent alloy forged by the Hiroshima atomic blast

https://www.science.org/doi/10.1126/sciadv.aeg8299
69•_____k•5d ago•24 comments

Aristotle quotes on virtue, knowledge, and happiness

https://www.campion.edu.au/blog/top-25-aristotle-quotes-on-virtue-knowledge-and-happiness/
126•teleforce•5h ago•41 comments

Celld: Self-hosted, distributed Durable Objects

https://github.com/denoland/celld
29•calvinfo•2h ago•1 comments

Microsoft's AI Sales Mostly Come from OpenAI, Disclosures Show

https://www.bloomberg.com/news/articles/2026-08-05/microsoft-s-ai-sales-mostly-come-from-openai-d...
33•mapping365•1h ago•5 comments

Rubin Observatory's first LSST Camera release: 500k galaxies in the COSMOS field

https://rubinobservatory.org/news/rubin-new-window-cosmos-field
58•MarcoDewey•5h ago•5 comments

Building an Advanced Agentic Harness

https://data4sci.com/blog/building-an-advanced-agentic-harness
71•Anon84•5h ago•36 comments

Painting with Gaussians

https://yogthos.net/posts/2026-08-03-splat-painter.html
65•yogthos•5h ago•10 comments

Oracle cut its Always Free ARM limits to 2 OCPU / 12GB, enforced Aug 18

https://www.cnelecar.com/blog/oracle-always-free-arm-limits-cut-2026/
138•iplaypc•4h ago•93 comments

Faster Than Ninja

https://build2.org/blog/faster-than-ninja.xhtml
68•elasticdog•5h ago•26 comments

Position: LLMs Can't Jump

https://openreview.net/challenge?redirect=%2Fforum%3Fid%3DklU4737opt
203•theanonymousone•8h ago•139 comments

Civilian plane crash in New Mexico tied to military GPS blocking

https://www.wired.com/story/a-civilian-plane-crashed-in-new-mexico-was-the-militarys-tech-to-blame/
396•dzdt•8h ago•196 comments

The Law of Jante (2015)

https://www.theparisreview.org/blog/2015/02/11/the-law-of-jante/
19•NaOH•1d ago•1 comments

Energizing a vacuum-tube flip-flop module from a 1948 IBM system

https://www.righto.com/2026/07/ibm-604-trigger-tube-module.html
35•Jimmc414•5d ago•6 comments

Proxmox VE now available for ARM64

https://forum.proxmox.com/threads/proxmox-virtual-environment-now-available-for-64-bit-arm-arm64....
13•geerlingguy•4h ago•1 comments

TIME Is Serving AI Bots a Different Website, with Ads Built In

https://www.vincentschmalbach.com/time-serves-ai-bots-a-different-website/
208•vincent_s•6h ago•88 comments

The "Disability Dongle": Why Silicon Valley Hates Me and You

https://sightlessscribbles.com/disability-dongle/
157•calcifer•4h ago•150 comments