Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Trello handed over my personal account to my previous company

community.atlassian.com

Post reply on HN
Print view View original

221–230 of 274 posts

Re: Trello handed over my personal account to my previous company

#221

Post by pdonis »

yardie wrote: post #201
mercer wrote: post #170

Earlier quoted context omitted.

So we can conclude that Atlassian started its journey fucking up Trello?

Not only did they fuck it up. It was implicitly used as a feature. If you can attach multiple email accounts to a service then of course you would attach your work email to it. The real devious behaviour was assigning your entire account to another entity to manage and without your permission. I've had to create a new account, ask the enterprise account manager to remove my account, and move my cards to another accou…

> If you can attach multiple email accounts to a service then of course you would attach your work email to it.

Why? To me this is an obvious mistake. If you need to have sole control over your access to your account, then you should never attach an email to it that you don't control. You don't control your work email.

Re: Trello handed over my personal account to my previous company

#222

Post by rsre »

I'm on the same boat.

I contacted Atlassian support via my personal email account and they informed me that somehow my subscription is tied to my personal account, but I need to use my former work email to login.

I can't do that, so I've lost access to all my personal boards and apparently to my Gold Subscription too.

Re: Trello handed over my personal account to my previous company

#223

Post by crooked-v »

bearer_token wrote: post #200

Imagine this from the other perspective: 1. You use Trello to track work with your team. 2. You invite your team to use Trello using corporate email accounts. 3. Someone leaves the company. You decommission their corporate email. 4. Five years later, you find out that person still has access to all of your work trello boards. At this point, I'd be flipping my shit and threatening to sue Trello. Trello's response woul…

> Five years later, you find out that person still has access to all of your work trello boards.

That's not how it works and not how it has worked.

It used to work like Github does, where access control to boards is by account, not by associated email addresses.

Re: Trello handed over my personal account to my previous company

#224

Post by tomerv »

FeepingCreature wrote: post #136
ratww wrote: post #134

Earlier quoted context omitted.

When I was consulting it was common for companies to add my professional e-mail to their services, because forcing me use an e-mail provided by them could be used as proof of employment, and that's something they didn't want. They used to create an account using my professional contact email without asking, of course, and it would give me all sorts of problems with some SaaS services. Stuff similar to the ones in thi…

> They used to create an account using my professional contact email without asking, of course I don't understand how this is an issue. Just don't confirm the account. Or are there SaaS platforms where you can add users with arbitrary emails without confirmation?

Of course there are! And it's all part of SV culture.

A few years ago I tried to sign up to LinkedIn only to find out I already have an account. But it was not my account - it was someone else's, who has a similar name (and apparently thought my email address was his? I don't know...). I could reset the password and log in to his account. I was a bit scared when I contacted LinkedIn support, because I was worried they would accuse me of hacking. Eventually they disconnected my email from his account.

Now, I know that LinkedIn isn't a SaaS platform, but you would think that such a big company wouldn't make such rookie mistakes. Even if they launched without email confirmation, and added it later, there should be some mechanism to "fix" the old accounts.

Re: Trello handed over my personal account to my previous company

#225

Post by WorldMaker »

usr1106 wrote: post #154
znpy wrote: post #127

Earlier quoted context omitted.

> You don't need separate Firefox profiles for that, you can use Firefox containers. Firefox Containers are awful. Only firefox profiles can give you true separation. It would have been better if Mozilla had added a better interface to profiles.

> Firefox Containers are awful. Any details, how do they leak? > Only firefox profiles can give you true separation I don't think they would help a lot against fingerprinting. (I have no idea how commonly used fingerprinting is at the moment.)

> Any details, how do they leak?

Extensions, mostly. You have to be real careful which extensions you install because extensions run at the window level (mostly) rather than the container level and see across/through containers.

Also things like auto-fill (including password suggestions); if you like that being very specific to context, then you'd want different profiles rather than containers.

I've found I've been using a mixture of profiles and containers, myself, to balance ease of access (containers are fast to launch and can auto-launch per specific sites) versus better extension control and auto-fill/etc separation.

(ETA: As for finger-printing, both containers and profiles are equal on the most common finger-printing: cookies and localStorage. Neither protects you well from IP Address tracking, which is a growing concern, but not the approach of at least the big players like Google or Facebook, yet.)

Re: Trello handed over my personal account to my previous company

#226

Post by lowwave »

TLightful wrote: post #125
shashanktomar wrote: post #75

From the comments, there is some confusion about why did i attach my personal email to a company account. That was not the case, let me clarify it. I created my personal account long before Trello was acquired by Atlassian. It did not have any SSO at that point and the login was with username and password. At some point, while working on a side project and to share it with a teammate, I attached a secondary email to…

Wow. Bye bye, Atlassian. Moving immediately.

take a look at https://wekan.github.io

Nice open source self hosting alternative.

Re: Trello handed over my personal account to my previous company

#227

Post by pdonis »

geocar wrote: post #109
dx034 wrote: post #91

Earlier quoted context omitted.

Isn't it standard to open separate accounts for companies? My employers would've never even allowed me to use a personal account or personal email for business content. In the end, they need to be able to claim the content if an employee leaves the company. Mixing personal and company accounts or even accounts of several employers sounds dangerous to me.

> Isn't it standard to open separate accounts for companies? I understood that these were separate accounts in separate systems, they just had the same email address attached to both because it was convenient to log into each system from separate workstations - a little bit like using a company phone for a personal telephone call. When one company (Atlassian) acquired the other (Trello), the "accounts" were merged by…

> I understood that these were separate accounts in separate systems

That's not what I'm seeing in any of the examples discussed in this thread. What I'm seeing is one account which started out as a personal account, then the person added their work email to it so they could get access to their employer's data through that account--instead of creating a separate work account under their work email.

Now their "personal" account isn't just personal any more; they have given their employer a means of controlling it, since their employer controls their work email. And then they have problems down the road. The solution to those problems is to never attach an email you don't control to an account you want to have sole control over.

Re: Trello handed over my personal account to my previous company

#228

Post by pdonis »

Wowfunhappy wrote: post #26
gumby wrote: post #6

I think atlassian’s position is correct here, sad to say. They had to make a branch cut and i don’t think the other arm would be safe for them (company stuff leaked to a private account). Of course that stuff was already leaked, but I think the liability would fall on Atlassian if the company count delete that stuff. Don’t connect your personal stuff to your work stuff. That’s messed me up more than once — lesson lea…

The user's account contained a secondary email address from five years ago. The user probably didn't even remember it was still on their account. Should you lose your account over that?

> Should you lose your account over that?

Once you attach an email you don't control to the account--like your work email that your employer controls--then it isn't "your" account any more. You have given someone else a means of controlling it. The solution is to not do that.

Re: Trello handed over my personal account to my previous company

#229

Post by pdonis »

shashanktomar wrote: post #16
nerdbaggy wrote: post #5

Sounds kinda like the users fault, having a corporate and personal email on the same account. Atlassian probably could put a warning though about the issues that could arise.

I am the user in this case. I understand Atlassian's position in this case but this is so hard to track over such a long period of time. I left this workplace almost 5 years back and the account worked fine. Then it suddenly stopped working without any notification from their side.

> this is so hard to track over such a long period of time.

But you created the problem in the first place by adding your work email to an account that had your personal boards in it. By doing that you gave your employer a means of controlling that account. You basically planted a time bomb that could go off at some unpredictable time in the future. And it went off.

Re: Trello handed over my personal account to my previous company

#230

Post by WorldMaker »

the8472 wrote: post #185
diggan wrote: post #152

Earlier quoted context omitted.

I remember it used to be a native feature but I'm fairly certain they split it out into a separate addon after a while. Or did they move it back into core?

The basic functionality is in the core. (about:preferences -> search for "container"). But for better UI there is an extension.

Partly because Mozilla is continuing to iterate/experiment on the container UI and leaving that to extensions is a way to keep that laboratory open. They seem worried the UI may be too confusing if it was on by default for a lot of users. (Like the era decades ago when -ProfileManager was on-by-default in some installs.)

Mozilla even has two official extensions, trying to explore the space of ease of use/user expectations. In addition to the main multi-container extension they offer Facebook Container which is an extension designed to be more entry level but for folks worried about privacy. (It does what it says on a tin, creates only one additional container, names it Facebook, and automatically moves all Facebook tabs and pretty much only Facebook tabs into it.)

Post reply on HN