commit: a9f510b07d784af0b8bd6be41d9f316995c0895c
parent 59a6ca6b0a6a5ca53e13225b99826dd789aebcf4
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date: Fri, 15 Feb 2019 18:58:46 +0100
articles/AtASSian: New Article
Diffstat:
4 files changed, 66 insertions(+), 0 deletions(-)
diff --git a/articles/AtASSian.shtml b/articles/AtASSian.shtml
@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html lang="en">
+ <head>
+<!--#include file="/templates/head.shtml" -->
+ <meta property="og:type" content="article"/>
+ <meta property="og:title" content="30 Ways of Pride Challenge"/>
+ <title>AtASSian — Cyber-home of lanodan</title>
+ </head>
+ <body>
+<!--#include file="/templates/en/nav.shtml" -->
+<!--#include file="/articles/AtASSian.xhtml"-->
+ <a href="/articles/AtASSian.xhtml">article only(plain XHTML)</a>
+<!--#include file="/templates/en/footer.html" -->
+ </body>
+</html>
diff --git a/articles/AtASSian.xhtml b/articles/AtASSian.xhtml
@@ -0,0 +1,39 @@
+<article xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<a href="/articles/AtlAASian"><h1>AtlAASian: The Bullshit factory</h1></a>
+<p>This is a port of a loose-thread I made on the Fediverse while trying to delete an account on codacy.com that was supposely linked to BitBucket (Atlassian service).</p>
+<p>Start of this bullshit: <a href="https://queer.hacktivis.me/objects/c703a3fe-3f48-41af-99cd-6d29e1b0aa2f">2019-02-15 17:28</a></p>
+<p>So after trying to log into Codacy via BitBucket via Atlassian while not remembering either the email nor the password (yeah it was already a huge mess), I guessed the email would be the same as the one Codacy send me the notification.</p>
+<p>So I go to account recovery, it sends me a email with a overly large link (~1180 characters) to reset my password, google recaptcha greeting, fill the password, omit filling the Full Name, “Submit”, help train the Google AIs, “Full name must not be empty” (at this point I’m quite aware that they are fucking noobs at doing web), fill it, “Submit”, “I’m not a Robot”</p>
+<figure>
+ <img href="https://queer.hacktivis.me/media/2bac45b7-6ecb-4873-9445-592fa3b7c8bc/screen.png" alt="Screenshot: Page headed “Are you using the right account?” and choosing for either Signing for BitBucket or using a different account"/>
+ <caption>Wait… did they just send me a password reset link while my account is non-existent?</caption>
+</figure>
+<p>Whatever, I end up on https://id.atlassian.com/manage-profile, which goes into a redirection loop (noobs). Well let’s see if there is another way to delete the account. Search for “GDPR Atlassian Delete”, after a bit I end up on a heavily bugged webpage headed “Request deletion of personal data”.</p>
+<figure>
+ <img href="https://queer.hacktivis.me/media/fc0972a2-e61e-4f19-95b2-61dd29b3ab12/screen.png" alt="Screenshot: Functionality is not ready yet (it’s broken)"/>
+ <img href="https://queer.hacktivis.me/media/f3cf3b33-0e5f-420e-886d-cb74aaa514ea/screen.png" alt="Screenshot: Form to request deletion of your personnal data (it works)"/>
+ <caption>First image is without accepting launchdarly in uMatrix, second is why accepting it. Enjoy the non-sensical error message.</caption>
+</figure>
+<p>So once their widget works: <q>There was an error during form submission. Please try again later.</q> Well I try right away (with google recaptcha allowed in the meantime): it works</p>
+<p>And few seconds later I receive this in my emails:</p>
+<pre>
+*****************************************
+Your request to delete your personal data
+*****************************************
+
+We received a request to delete your personal data. Because you have an Atlassian account, you need to delete your account, which will delete your personal data along with it. To do so, log in to your account and go to the
+*Delete account* tab. If your organization manages your account, ask an organization admin to delete the account for you.
+Log in to your Atlassian account ( <a href="https://id.atlassian.com/manage-profile/close-account">https://id.atlassian.com/manage-profile/close-account</a> )
+If you didn't make this request, you can ignore this email. We won't delete your personal data. Report this email. ( <a href="https://support.atlassian.com">https://support.atlassian.com</a> ) Thanks, The Atlassians
+
+( <a href="https://www.atlassian.com">https://www.atlassian.com</a> )
+</pre>
+<p>So back where I was…</p>
+<p>I fiddle a bit with uMatrix on the loop-redirecting id.atlassian.com, end up creating a clean firefox profile, disable referer spoofing on it and it finally loads.</p>
+<figure>
+ <img href="https://queer.hacktivis.me/media/abbd992b-ccaa-403f-ad8a-7b0eea397e7c/screen.png" alt="Screenshot: We’ll permanently delete your account"/>
+ <img href="https://queer.hacktivis.me/media/62f7f0a1-12ea-4446-a286-90584c4706fc/screen.png" alt="Screenshot: Firefox pop-up about “How tracking protection works”"/>
+ <caption>Finally… Extra: Enjoy this mozilla pop-up.</caption>
+</figure>
+<p>End of this bullshit: <a href="https://queer.hacktivis.me/objects/8f872036-e67e-4f2b-9284-b3153a77362a">2019-02-15 18:17</a> so about 45 minutes.</p>
+</article>
diff --git a/feed.atom b/feed.atom
@@ -10,6 +10,17 @@
</author>
<entry>
+ <title>AtASSian</title>
+ <link rel="alternate" type="text/html" href="/articles/AtASSian"/>
+ <id>https://hacktivis.me/articles/AtASSian</id>
+ <published>2019-02-15T18:57:04Z</published>
+ <updated>2019-02-15T18:57:04Z</updated>
+ <content type="xhtml"><div>
+<!--#include file="/articles/AtASSian.xhtml"-->
+ </div></content>
+ </entry>
+
+ <entry>
<title>I’m removing defaults to eternal cryptographic signatures</title>
<link rel="alternate" type="text/html" href="/articles/I%E2%80%99m%20removing%20defaults%20to%20eternal%20cryptographic%20signatures"/>
<id>https://hacktivis.me/articles/I%E2%80%99m%20removing%20defaults%20to%20eternal%20cryptographic%20signatures</id>
diff --git a/home.shtml b/home.shtml
@@ -6,6 +6,7 @@
</head>
<body>
<!--#set var="transPageUrl" value='accueil' --><!--#set var="feedURL" value='/feed.atom'--><!--#include file="templates/en/nav.shtml" -->
+<!--#include file="/articles/AtASSian.xhtml"-->
<!--#include file="/articles/I’m removing defaults to eternal cryptographic signatures.xhtml"-->
<!--#include file="/articles/Email to graphics-dev@chromium.org about nouveau blacklisting.xhtml"-->
<!--#include file="/articles/Few updates about this website.xhtml"-->
