Live data from Hacker News

Trello handed over my personal account to my previous company

community.atlassian.com

261–270 of 274 posts

Re: Trello handed over my personal account to my previous company

#261

Earlier quoted context omitted.

That’s one of the motivations for the “new” project Tim Berners Lee is working on, Solid. The amount of foresight people working on the web have is crazy. I read an article interviewing Lou Montulli the other day and was amazed to find out how how extensively he thought about the nefarious use of cookies when they were being designed

Can you share the URL for that interview with Montulli, please? Thnx!

I'm not OP but there is him talking on his blog about cookies:

https://montulli.blogspot.com/2013/05/the-reasoning-behind-w...

https://montulli.blogspot.com/2013/05/why-blocking-3rd-party...

He doesn't come across as overly prescient there, but there's definitely some of the familiar juggling trade-offs in his design decisions.

Re: Trello handed over my personal account to my previous company

#262
post #124

Earlier quoted context omitted.

Unix graybeards selfhost. That saying "cloud is someone else's computer." is relevant here. Now, you can ask, what self-hosting really means and that is complicated. Does rented server count? Colocation? Or only way is own premises? I have worked places, where last one is hard requirement. Generally though, I am pleased with colocation, some places even have customer provided locks on racks. But even if you have chea…

The funny thing is, everyone used to self-host. A home ISP account typically came with an email address, some space to host a website, etc. Of course you could set up other facilities as well, but even without that, you had control of the storage. The Web was full of articles on how to build your first home page, which plenty of non-geek people managed to do just fine. The biggest danger back then was probably that i…

> A home ISP account typically came with an email address, some space to host a website

But that's not really self-hosting is it? If my ISP can decide to poke around in my user folder and there's nothing I can do about it?

Re: Trello handed over my personal account to my previous company

#263

Earlier quoted context omitted.

I feel moved to strictly only use fake names online. Like.. I recently moaned and whined to my friend about how when i was growing up a person/entity (to my recollection) would feel.. like they received a magical gift just to send a message online.. having a web page was like.. winning the nerd superbowl.. Now it's like.. we are supposed to take a knee to any company that gets sufficient presence and significance (li…

> I feel moved to strictly only use fake names online. Isn't this how usernames started?

I'm not sure how they started. Was it because of people feeling their 'honest' self info was being used to identify then control them via highjacking their personal accounts in honor of some ex employer?

Re: Trello handed over my personal account to my previous company

#264

From the comments, there is some confusion about why did i attach my personal email to a company account. That was not the case, let me clarify it. I created my personal account long before Trello was acquired by Atlassian. It did not have any SSO at that point and the login was with username and password. At some point, while working on a side project and to share it with a teammate, I attached a secondary email to…

Serious question as someone who does not use any "cloud" services: Did you not have a backup of your data in Trello? Orthogonal to the issue of account ownership, on which I stand firmly in your favour, did you not have a backup of the data? What would happen if Trello went bust, or somehow otherwise lost your data?

I would love to know why this was downvoted.

I have all my data backed up. I won't use a device or service that does not allow me to back it up.

Re: Trello handed over my personal account to my previous company

#265
post #206

Earlier quoted context omitted.

I'm not znpy so I don't know why they don't like containers. But I prefer profiles myself, as I have different extensions in different profiles and I get the two completely separate instances of Firefox, while containers are just separate tabs instead. I don't think containers are awful though, they are just less useful for my use case than profiles.

I sometimes have issues with the profiles too though. If I have both profiles running concurrently and I click a link from a different application, I get an error that "Firefox is already running" and it freezes up the window with my primary profile. Do you ever experience that?

Strange, haven't had that issue myself, running firefox-75.0-1 on Arch Linux. You probably should report that to Mozilla, if you can.

Re: Trello handed over my personal account to my previous company

#266

Earlier quoted context omitted.

The funny thing is, everyone used to self-host. A home ISP account typically came with an email address, some space to host a website, etc. Of course you could set up other facilities as well, but even without that, you had control of the storage. The Web was full of articles on how to build your first home page, which plenty of non-geek people managed to do just fine. The biggest danger back then was probably that i…

> A home ISP account typically came with an email address, some space to host a website But that's not really self-hosting is it? If my ISP can decide to poke around in my user folder and there's nothing I can do about it?

No, it's not, but it's a lot closer than using some intermediary service, and it's convertible to true self-hosting if you find you need to later because the data is all under your own control and ownership throughout.

Re: Trello handed over my personal account to my previous company

#267

Earlier quoted context omitted.

> Try suggesting that you can run a software business without using GitHub as your single point of failure^W^W^W^Wsource control system, and a lot of young developers will just laugh and wonder what you've been smoking. TBH, I've never worked at a company that would host their source code at a third party service. At my first job, we wouldn't even use a web UI for the repositories (I still think that's not all that u…

I worked at a place that had virtually zero internal systems, including version control, and relied heavily on Github in particular for things like access control, beyond just source control. One of their remote devs had his Github account hacked (pre 2FA) and then had access to Slack as well, and the hacker managed to socially engineer his way into a number of sensitive areas and increased access, to the point the c…

But that sounds like a case where the attacker would have gained access to most relevant stuff anyway, and the difference in effect was mostly to the tune of $35k in costs (instead of spending resources on companies' own hardware)? While that's a big chunk for a start-up, it's not even one year of a developer salary.

While I am of the similar old school like you (I run my own mail server, web server, nextcloud, used to do ejabberd too...), I think it's more cost effective for smaller companies not to do it themselves, as long as they keep their own backups.

The difference is that when they self-host, they are more vulnerable to targeted attack (on average, for similar dollar investment), but if they host with SaaS providers, it's opportunistic attacks they should worry about more.

Re: Trello handed over my personal account to my previous company

#268
post #241

Earlier quoted context omitted.

> Try suggesting that you can run a software business without using GitHub as your single point of failure^W^W^W^Wsource control system, and a lot of young developers will just laugh and wonder what you've been smoking. To be fair, this example isn't quite as bad. It's simple enough to add a new remote to your working copies and host your repo elsewhere. It doesn't help with GitHub-specific features like comments or…

Usually complaints like this have more to do with the social processes around coding than the actual task of storing and versioning source code (which as you say is portable and standard). "I want to make a change to a shared library. Why can't I make a pull request?" "Wait, I have to use this unfamiliar interface to make comments on other people's changes and I can't leave comments on specific lines?" "You know, if…

Indeed, only big free software silos manage to fight this push off (think Gnome, KDE, Debian, FreeBSD... and even some of those are partially pulled in like Ubuntu, which even had its own hosting platform in Launchpad.net).

I like to say that I was a free software developer before github, which means that I never really participated in it, but I frequently feel excluded when I am asked for my github profile ("sorry, there is nothing there, but I can point you at a dozen other repos...").

I am still resisting, but who knows for how long :)

Re: Trello handed over my personal account to my previous company

#269

Earlier quoted context omitted.

I feel moved to strictly only use fake names online. Like.. I recently moaned and whined to my friend about how when i was growing up a person/entity (to my recollection) would feel.. like they received a magical gift just to send a message online.. having a web page was like.. winning the nerd superbowl.. Now it's like.. we are supposed to take a knee to any company that gets sufficient presence and significance (li…

> I feel moved to strictly only use fake names online. Isn't this how usernames started?

Usernames probably come from the multiuser nature of early computers, and some of the early limitations of software implementations (eg no spaces so your homedir could match your username on a fs that supports no spaces).

Aliases or nicknames are a common human choice, which allows one to be represented by a word/name of one's own choosing that portraits you in a light you want, without tying to your real identity which might have other implications (sometimes negative, of course).

Re: Trello handed over my personal account to my previous company

#270
post #224

Earlier quoted context omitted.

> They used to create an account using my professional contact email without asking, of course I don't understand how this is an issue. Just don't confirm the account. Or are there SaaS platforms where you can add users with arbitrary emails without confirmation?

Of course there are! And it's all part of SV culture. A few years ago I tried to sign up to LinkedIn only to find out I already have an account. But it was not my account - it was someone else's, who has a similar name (and apparently thought my email address was his? I don't know...). I could reset the password and log in to his account. I was a bit scared when I contacted LinkedIn support, because I was worried the…

I think it's especially common for mobile apps to accept emails without validation: I have a couple of accounts for different people with similar names on my rarely used gmail email.
Post reply on HN