Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Goodbye Auth0

joshcanhelp.com

Post reply on HN
Print view View original

141–150 of 281 posts

Re: Goodbye Auth0

#141

Post by osmano807 »

rglullis wrote: post #121
sokoloff wrote: post #84

Earlier quoted context omitted.

At my second job, the company terminated an employee for poor performance and intended to let them stay on a short term to wrap things up and then start their severance. The first evening (or maybe the first Friday evening), that dev stayed late in the office and deleted the source trees from as many machines as he could get access to (this was 1996, so most machines didn't have logins) and wiped the hard drive on th…

Is that the lesson to learn here, really? An employee makes a stupid thing and the leadership didn't look into its security practices to avoid this type of attack?

The lesson to learn is to entrench fail-deadly protocols in as much infrastructure as possible in case of termination.

Re: Goodbye Auth0

#142

Post by makeitdouble »

ianhawes wrote: post #128
rglullis wrote: post #121

Earlier quoted context omitted.

Is that the lesson to learn here, really? An employee makes a stupid thing and the leadership didn't look into its security practices to avoid this type of attack?

The lesson here is that once an employee or contractor is terminated, you remove all access to internal infrastructure. That's it. That is the lesson.

Not "terminating" your employees and having meaningful conversations on how it goes after they know they're let go helps a lot.

That forces the employer to come up with actual explainations someone can digest, and gives the employee time to be rational and plan the pivot.

There will still be ugly stories, and preemptively removing accesses will be needed in some cases, but that's by far the exception and not the norm, and we usually know when that will be the case.

Re: Goodbye Auth0

#143

Post by ricenews »

_heimdall wrote: post #97
EdSharkey wrote: post #70

Earlier quoted context omitted.

Word choice can help your thinking. We all receive different struggles and decide how to respond. The way you describe your 'luck', I read as "random good fortune" tinged with some guilt for being a 'have' when there are so many 'have-not's. I prefer 'blessed', and not in the corny #blessed way, to describe my condition. To me, I was given much because so much is expected of me by God, by universe and by my higher se…

> I prefer 'blessed', and not in the corny #blessed way, to describe my condition. To me, I was given much because so much is expected of me by God, by universe and by my higher self. How do you avoid this leading to a feeling that you, and anyone else "blessed", is more important that others? Should we really assume that the condition of one's life is an indicator of both the existence of a higher power and of that…

Not OP, but I’ll take a crack at responding.

The feeling of being “blessed” is the recognition that a substantial component of your current fortune is due to circumstances outside your control, whether due to a higher power, support from family/friends, raw luck, or the kindness of strangers. The proper and typical response to this feeling is one of gratitude, not self-importance, and the desired response is to contribute in various ways to the blessing of others (i.e. pay it forward).

It’s only when we lose the salience of that “blessed” feeling, and we start to take our circumstances for granted, that leads to our feeling of greater importance than others. It’s a slippery position no doubt, but the alternative feelings are: guilt (that I’ve received unfairly), anxiety (that what I’ve received may not be enough), jealousy (that what I’ve received is not enough), or pride/self-satisfaction (that I’m primarily responsible for what I’ve received). And honestly, it’s pride that is the true gateway to that feeling of self-importance you describe.

Re: Goodbye Auth0

#144

Post by StreetChief »

rglullis wrote: post #122
StreetChief wrote: post #116

Earlier quoted context omitted.

> when shit hits the fan all its leaders can do is to find blame in the individual. Or they could, like, take responsibility for their actions that led them to that point?

They could, but do they?

Very rarely; maybe i misunderstood your point. You're saying it's an institutional failure, but not one of the leaders? So, it's the governments fault they allowed corporate structures to function this way? Or maybe you want to blame the board of directors?

Re: Goodbye Auth0

#145

Post by doublerabbit »

pm90 wrote: post #107

I can’t help but wonder about all the people who can’t express themselves as well as this Author. No shade on them, Im glad to have read about their journey. But the cynical part of me wonders about all the other affected folks, and what their perspective was about their tenure.

A shock to reality, I suppose.

I yawn at these posts because you should expect in life to be churned and when flavourless thrown out. Pick yourself up and move on.

Should I care that someone worked at Auth0, SpaceX, Amazon or Google when they're just another company that pays you money? How is it any different to where I work?

I've done them all, banks, animation studio, enterprise, corporate, sme, porn and can tell you every single one is the same.

It's the corps vision of fairy dust that alludes the employee wrong is what. "Work for us and live a life of wonders and giggles *"

* until we get bored of you

Re: Goodbye Auth0

#146

Post by flumpcakes »

It has been interesting to read the comments here. At places I've worked I've always worked my full notice (usually months), however when other people have quit they've been locked out of their systems, and some escorted from the premises. Perhaps I come across as a naïve/nice/non-malicious. My roles have always been in some of the most sensitive positions within organisations. Often without a clear successor so perhaps the worry was about not being able to fix things if I was to become disgruntled. (Or simply not knowing if they could lock me out... as crazy as that sounds!)

Re: Goodbye Auth0

#147

Post by andrewaylett »

rollulus wrote: post #4

I don’t get it why the US company layoff culture is so different from what I’m familiar with, the European one. What are they afraid of that people need to be locked out? That one brings a gun to work? Here you get laid off, get a notice, are expected to continue working for a while (but depending on your work ethic you’ll take it easy), consume your remaining PTO, complain to your coworkers about what happened durin…

The UK has rules about such things. If your job is at risk of redundancy, there are formal processes to follow. If enough jobs are at risk of redundancy, there's a whole consultation process that needs to happen before people are actually "made redundant". People are expected to work while that takes place.

Money can smooth things over, though. The process is expensive, and has to be done properly, or the company can offer "voluntary redundancy" where they pay you to go away quietly. That happened to me. I don't know whether I was locked out or not, because I didn't try to log in again.

Re: Goodbye Auth0

#148

Post by rglullis »

osmano807 wrote: post #141
rglullis wrote: post #121

Earlier quoted context omitted.

Is that the lesson to learn here, really? An employee makes a stupid thing and the leadership didn't look into its security practices to avoid this type of attack?

The lesson to learn is to entrench fail-deadly protocols in as much infrastructure as possible in case of termination.

> in case of termination

The lesson is that employees should only have access to the resources that they need to do their job at all times, and that there should be a fine-grained permission system to check if someone can read or read-write to all these resources.

Even when I am working on my projects, by myself, I use different accounts to access my services, depending on the role. At first it might seem crazy, but if you learned how to do this and you automate this process, it is a life-saver if you suddenly find yourself need quick help from some contractor or if you want to give a backup key to a trusted friend as a way to say "here is what you need to do in case something happens to me".

Re: Goodbye Auth0

#149

Post by rescbr »

artyom wrote: post #135
rollulus wrote: post #4

I don’t get it why the US company layoff culture is so different from what I’m familiar with, the European one. What are they afraid of that people need to be locked out? That one brings a gun to work? Here you get laid off, get a notice, are expected to continue working for a while (but depending on your work ethic you’ll take it easy), consume your remaining PTO, complain to your coworkers about what happened durin…

Because losing your job is really a bummer everywhere, but in Europe you've got a lot of things covered by the welfare state (how well, it's a different discussion), so it's less stressful, which reduces the probability of people being really pissed . In the US, you're probably out of healthcare in the blink of an eye, may have no severance, no coverage, no unemployment benefits, and in some cases it'd mean deportati…

> and in some cases it'd mean deportation.

I completely understand the shittiness of this issue and I'm not from a developed country, but I mean, this is the reality of a temporary work visa, no?

I might be more pessimist/realist, but until I receive a permanent residency visa, I'd treat everything as temporary, ready to move back in a couple days notice.

Re: Goodbye Auth0

#150

Post by panick21_ »

artyom wrote: post #135
rollulus wrote: post #4

I don’t get it why the US company layoff culture is so different from what I’m familiar with, the European one. What are they afraid of that people need to be locked out? That one brings a gun to work? Here you get laid off, get a notice, are expected to continue working for a while (but depending on your work ethic you’ll take it easy), consume your remaining PTO, complain to your coworkers about what happened durin…

Because losing your job is really a bummer everywhere, but in Europe you've got a lot of things covered by the welfare state (how well, it's a different discussion), so it's less stressful, which reduces the probability of people being really pissed . In the US, you're probably out of healthcare in the blink of an eye, may have no severance, no coverage, no unemployment benefits, and in some cases it'd mean deportati…

Tying healthcare to employment is a uniquely stupid idea.
Post reply on HN