Trello handed over my personal account to my previous company • Hacker News Board

Re: Trello handed over my personal account to my previous company

#191

Post by ernsheong » Wed, Apr 15, 2020, 1:32 PM UTC

TLightful wrote: post #125

shashanktomar wrote: post #75

From the comments, there is some confusion about why did i attach my personal email to a company account. That was not the case, let me clarify it. I created my personal account long before Trello was acquired by Atlassian. It did not have any SSO at that point and the login was with username and password. At some point, while working on a side project and to share it with a teammate, I attached a secondary email to…

Wow. Bye bye, Atlassian. Moving immediately.

I created a Trello alternative, check it out at https://www.kanrails.com

Would love to get feedback!

Re: Trello handed over my personal account to my previous company

#192

Post by the_pwner224 » Wed, Apr 15, 2020, 1:40 PM UTC

dhimes wrote: post #184

diggan wrote: post #153

Earlier quoted context omitted.

You can either start firefox with `-P` to the profile chooser when starting firefox, or navigate to `about:profiles` to show the UI for managing them. Would allow greater discovery if this `about:profiles` page was exposed somewhere in preferences, but at least there is something I guess.

I just almost always start firefox with a mouse click- even on fluxbox :/

$ cd ~/.local/share/applications

$ cp /usr/share/applications/firefox.desktop .

$ vim firefox.desktop

Add -P onto the end of the 'Exec' line. Now your click button for firefox will open the profile manager.

Re: Trello handed over my personal account to my previous company

#193

Post by raziel2p » Wed, Apr 15, 2020, 1:59 PM UTC

znpy wrote: post #137

0k wrote: post #104

Beware the Atlassian's SSO "2 factor authentication" (2fa). I remember asking them every month years back their hand over to Atlassian - to create / enable backup codes functoonality. Several months ago after changing countries and phones I discovered that my backup codes didn't work. Their "support" offered me a "solution" - to delete all my boards associated with my email so that I could create fresh ones. Zero apo…

THIS. AVOID whenever possible sms-based 2fa. Use totp codes. SMS makes your phone a single point of failure [1]. I currently use the OTP feature of keepassxc, so that I can still generate otp code but can have those codes replicated on my trusted devices. You can save the seed of the TOTP and re-install the otp on other devices too. [1] plus you should really try and depend as little as possible on your smartphones.…

nowhere does the parent mention SMS - they're talking about backup codes, which exist regardless of whether you use TOTP or SMS or something else.

Re: Trello handed over my personal account to my previous company

#194

Post by matthewaveryusa » Wed, Apr 15, 2020, 2:08 PM UTC

You're a special kind of person if you are concerned about the privacy of your account and also enable your company's SSO on your account. I don't disagree that the conclusion of the story is that it sucks, but the moment you meld your private stuff with your company stuff you're asking for it.

I generally have little sympathy toward people expecting privacy on assets provided by the company, wether that be hardware or software. If you read your private email on a corporate asset, or enable sign-on with a corporate credential, all data can and should be inspected by your corporation. The fact that companies don't MitM _everything_ is what's surprising.

Re: Trello handed over my personal account to my previous company

#195

Post by BerislavLopac » Wed, Apr 15, 2020, 2:09 PM UTC

The exact same thing happened to me. This was the Trello support team response:

"I've taken a look at your account, and ultimately, the problem is that the email address of your former employer was still attached to the Trello account. In their recent account claim, this triggered your employer to claim ownership of the Trello account, which is something Trello's terms allow Enterprises to do. Because the email address was still on the account, your employer identified it as an account that they should own, and ownership of this Trello account was transferred to your former employer, so no changes can be made to the account, and the company owns that account.

It sounds like you have personal content in this account that you want access to? Given the account ownership, that's not something that we can do on our end, unfortunately. If the company consented, they could remove your account from all company teams, and then we could remove the Enterprise association, but that's something you'd need to explore with them, if they'd be willing to do that."

Re: Trello handed over my personal account to my previous company

#196

Post by 0x00000000 » Wed, Apr 15, 2020, 2:12 PM UTC

bayindirh wrote: post #181

taneq wrote: post #114

Earlier quoted context omitted.

Wow, their response is atrocious. It's basically just "Yes, that's right, there was a second email address attached to your account and the owner of the domain for that email set up SSO, so they now own your account. Try asking them nicely for it." I started disentangling myself from Atlassian products a few years ago but I was still using Trello. Clearly that's going to have to stop.

Instead, I have a strict separation rule for these kind of services. No work stuff is hosted in my personal accounts, and work accounts are always created with a separate e-mail. I can just remove myself from everything work related without touching anything personal. While I was working with a small group, we had our own domain and e-mail addresses as a perk. My relationship went sour with the lead of the project an…

Meanwhile on Facebook you cannot create a page for a business(say you work in the marketing department) without linking your PERSONAL account to it. Absolutely fucking insane.

Re: Trello handed over my personal account to my previous company

#197

Post by emmelaich » Wed, Apr 15, 2020, 2:17 PM UTC

I've had a similar thing happen. I got the cheap tier for myself. (first.last@gmail). About the same time, I had a work email (first.last@example).

For some reason, they listed my cheap tier license under the work email. I still have no idea how this happened except for maybe laziness by some Atlassian support person.

Re: Trello handed over my personal account to my previous company

#198

Post by dotancohen » Wed, Apr 15, 2020, 2:22 PM UTC

shashanktomar wrote: post #75

From the comments, there is some confusion about why did i attach my personal email to a company account. That was not the case, let me clarify it. I created my personal account long before Trello was acquired by Atlassian. It did not have any SSO at that point and the login was with username and password. At some point, while working on a side project and to share it with a teammate, I attached a secondary email to…

Serious question as someone who does not use any "cloud" services: Did you not have a backup of your data in Trello? Orthogonal to the issue of account ownership, on which I stand firmly in your favour, did you not have a backup of the data? What would happen if Trello went bust, or somehow otherwise lost your data?

Re: Trello handed over my personal account to my previous company

#199

Post by bluGill » Wed, Apr 15, 2020, 2:33 PM UTC

p2t2p wrote: post #122

dreyfiz wrote: post #60

GitHub did this to me a few years ago. I still feel violated. Not by my idiot former employer. I feel violated by GitHub. I got my account back. Sort of. They detached a significant amount of my content from my account, and returned to me a gimpy lobotomized version of myself. All my old GitHub comments are credited to “ghost” now. I was somewhere in the first 12,000 GitHub accounts. My relationship with GitHub signi…

Lemme just go and de-attach my personal Github account from corporate one, just in case....

If only there was a way to do that without creating multiple accounts.

At least my company doesn't host anything on public guthub (guthub for enterprises has everything) so they don't need to be connected. If you have personal and company stuff you are in trouble even if you separate them.

Re: Trello handed over my personal account to my previous company

#200

Post by bearer_token » Wed, Apr 15, 2020, 2:42 PM UTC

Imagine this from the other perspective:

1. You use Trello to track work with your team.

2. You invite your team to use Trello using corporate email accounts.

3. Someone leaves the company. You decommission their corporate email.

4. Five years later, you find out that person still has access to all of your work trello boards.

At this point, I'd be flipping my shit and threatening to sue Trello.

Trello's response would be: sorry, the employee associated a 2nd personal account.

This would be unacceptable from a corporate access control perspective!