| > We're talking about 2 different kind of VPN here, and you know it, please don't spread confusion on that topic. Nobody needs to connect to his own database service using some B2C service like North VPN to obfuscate where the actually queries come from. Honestly, a student/hobbyist from Turkey who is trying specifically to defend against a local eavesdropping or censorship threat, or to work around restrictive firewall configurations on public WiFi networks, might very well use exactly the same types of VPNs you're describing, for some of the same legitimate purposes as any professional would use their corporate VPN. After all, they don't have a corporate IT department to maintain their own private VPN. These types of companies probably have more friendly pricing for a student/hobbyist from Turkey than the VPN companies whose marketing material focused on corporate use cases instead of circumventing Netflix geo blocks. You're right that it would not be the ideal type of VPN for database access control, but I can imagine it being an element of viable defense-in-depth strategies where one is in a country where most inbound local traffic other than your own would be malicious. Imagine coupling a restriction on source IP range with TLS + IAM credentials, or something like that. Requiring a presence on the specific chosen VPN company's netblock drastically shrinks the threat model vs allowing connection attempts from 0.0.0.0/0. > I'm not siding with Oracle, but Oracle owes absolutely nothing to a free tier user suspected of fraud. I agree that they don't owe anything to such a user, but equally we don't owe it to Oracle to refrain from criticizing these kinds of false positives in their fraud detection with no avenue for redress. Anyone who either experiences or hears about these kinds of outcomes is justified both in criticizing Oracle and in being less likely to recommend or choose Oracle for their or their employer's cloud computing needs. In turn, Oracle owes it to themselves to at least consider that possible consequence, and to allow at least enough redress to keep the severity of this reputational impact within whatever range they deem acceptable. |
Finally, here is their pitch for their free tier.
That ends that inane discussion with your misplaced moral arguments(also known as entitlement) quite clearly.
https://news.ycombinator.com/item?id=32322140