[sudhirj]

I disagree with the way Slack handled this, but by now it’s clear (even the original poster seems to have realised) that Slack banned everyone who accessed the service from an Iranian IP, irrespective of who they were or where they were from.

It’s pretty clear that’s it not motivated by race or any kind of profiling.

Slack has no incentive to boot more people off their platform than necessary, so this overly broad ban could be a result of either misunderstanding the US governments mandate, or that might be just what they were asked to do.

[robotbikes]

Who asked them to do this ? I have serious doubts that this action was directly recommended in any official government communication otherwise we would have had someone leak it and debate about it. My hunch is this isn't directed by a national security letter or anything like that with mandated secrecy otherwise we would see similar actions from other tech service providers. As far as I know Facebook isn't deleting the accounts of everyone who has connected from Iran or Syria. My suspicion is that this is the result of a shoddy communication between the legal department and some coders and I suspect that Slack will be stuck in a hard place explaining it and justifying it. As far as I know there was no official explanation or blog post, the suade velvet secret slack police just started causing people to disappear in the night. It will also be hard for them to walk back this action because they have set at least an internal precedent and opened themselves and other companies up to attack by opportunistic regulators if they now say they were wrong.

[bradleyland]

This is hard to explain to anyone who hasn't done business with the Federal government, but your visions of national security letters are very much on one end of a broad spectrum. At the other end of the spectrum is the mundane.

The mundane includes things like contracting with the Federal government or even certain government contractors. Our company just contracted with PAE, and PAE contractors must agree to much of the same Federal Acquisition Regulations as someone doing business directly with the Federal government. One of the vendor forms was 37 pages long, and it contains sections explicitly requiring certifications that your company will comply with sanctions. The form binds the signer to personal culpability for failure.

So if you're a company contracting in this process you're tasked with preventing delivery of your product to Iran, and the Federal government gets to set the bar, not you. If you fail to meet the bar, you end up in Michael Flynn's shoes, only far less public. How long of a bet is it to expect a Federal bureaucrat will interpret compliance the same way you do? Are you willing to risk inquiry if your opinions differ?

I don't like what's happening here. I don't like it at all, but I know just enough about dealing with the Federal government that I can smell the odor from here.

[brianpgordon]

It's not inconceivable that Slack's general counsel saw the headlines about Trump campaign officials being investigated for circumventing Iranian sanctions, evaluated their position, and recommended this action just to be safe.