Hacker News new | ask | show | jobs
by nickfromseattle 1370 days ago
I run a USA based SaaS and was mistakenly caught up in Auth0's 'sanctions'.

0. Production servers deleted

1. No logs, notifications or any indications of the issues

2. Can't get ahold of support on the free plan

3. Spend 1-2 weeks frantically trying to restore access to our customers

4. Find a random Auth0 support thread of someone who had the same issues

5. Auth0s response was to submit an affadavit to their legal team indicating I'm not sanctionable

6. Access restored after ~3ish weeks of downtime

Why was my SaaS caught up in sanctions?

I had a Russian developer deploy Auth0 two years ago (and hadn't logged in for 18+ months)

That was enough to get my production servers deleted with no warning.

3 comments

Automated enforcement is evil and must be banned (except in situations when the violations themselves mostly are automated and come in unbearably huge quantities).
>Automated enforcement is evil and must be banned

Aren't the only people able to enforce the banning of automated enforcement, politicians, the very people that want the blocking done in the first place?

All you have to do is get them automatically screwed over by some unaccountable systems and we will quickly have laws that require automated systems be accountable.
Banning automated enforcement is also the end of free and maybe even cheap services on the Internet.
Nah, it would be the end of politicians demanding ever increasing shitty automation affecting a huge percentage of valid use cases. We didn't have any regulations demanding automated enforcement before it was possible, certain media lobby industries just wouldn't be able to abuse the state to enforce their profits via spurious, entirely untried copyright claims.
Okay, I don't mind.

I am not rich but I would agree to double and triple on my internet subscription if the Internet would be made significantly better (scarce and exclusively curated non-intrusive ads, no tracking, no DRMs, no forced/nudged "engagement", no automated enforcement, no paywalls, everything easy to download and or syndicate, etc.).

In fact I would already pay Google and Facebook if they would seriously stop treating me as a product and would consider me a client whom they would act in best interest of. Yet they don't even offer, even those who actually pay them get blackholed routinely.

I understand there are poor countries where people really can't pay so I don't insist the business model has to change for everybody everywhere.

> In fact I would already pay Google and Facebook if they would seriously stop treating me as a product and would consider me a client whom they would act in best interest of.

They do. But their customers are their advertisers, not their users. Their users are literally the product. Their public services are bait for eyeballs.

If you were a fish, on a hook, would you offer to pay the fisherman for better tasting bait? The fisherman isn’t concerned about the bait as long as it’s good enough to catch you and send you to market.

You should probably ask for a refund then.
Insance.... what's next, I ate a Cuban sandwhich last year and posted it on instagram so GAFA will arbitrarily deplatform me ?
It's enough to post a comment on YouTube which doesn't entirely agree with the mainstream. I got a ban when I suggested on 20th Feb that Russia might attack Ukraine, and it took down the one (fortunately non-production) thing I had in GCP. Don't use them at all - especially not GCP - problem solved.