Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

support.okta.com

Post reply on HN
Print view View original

41–50 of 170 posts

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#41

Post by Sebguer »

lovellcw wrote: post #38
ClumsyPilot wrote: post #12

Oh, nice, my company is just integrating Okta. Is Cuba still being punished for daring to host Soviet missiles? I think the way we've treated them is really terrible.

Cuba exports terrorism and misery across the region. The dictatorships in Cuba, Venezuela, and Nicaragua fly under the radar these days, but are no less noxious to humanity than the regimes in Russia, Iran, NK, etc. You can argue whether or not sanctions are an effective way to promote regime change, or if they just hurt the regular citizens of rogue governments. I think they are often quite ineffective. But there's…

Cuba's biggest export is effectively doctors. But, sure, buy into decades old anti-communist propaganda!

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#42

Post by Sebguer »

hx833001 wrote: post #35
O__________O wrote: post #24

Earlier quoted context omitted.

Meaning if commerce with Cuba was not ban it would be a threat to Florida’s economy?

Meaning there are many Cuban refugees living in Florida who hate the Communist regime and will not support a President who does not continue the sanctions. No political party wants to lose Florida, therefor politicians have a good reason to continue US policy.

Florida's days of being a swing state will likely be over by the next presidential election. Desantis won by tight margins, but he seems to have done a great job attracting exactly the sort of people who'd vote for him to the state and has consistently worked to gerrymander and restrict voting rights for those who'd vote against him.

Crist couldn't even beat Rick Scott for the Senate, and Scott was one of the least popular governors in the country at the time of the election.

Edit: It was actually Bill Nelson who lost to Scott in 2018, my bad. Crist has been hiding out as a US Rep in Saint Pete since losing the governor's race to Scott.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#45

Post by imwillofficial »

lovellcw wrote: post #38
ClumsyPilot wrote: post #12

Oh, nice, my company is just integrating Okta. Is Cuba still being punished for daring to host Soviet missiles? I think the way we've treated them is really terrible.

Cuba exports terrorism and misery across the region. The dictatorships in Cuba, Venezuela, and Nicaragua fly under the radar these days, but are no less noxious to humanity than the regimes in Russia, Iran, NK, etc. You can argue whether or not sanctions are an effective way to promote regime change, or if they just hurt the regular citizens of rogue governments. I think they are often quite ineffective. But there's…

“Cuba exports terrorism and misery across the region.”

::walks away whistling hoping you don’t notice Iraq and Afghanistan’s blown up weddings::

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#46

Post by WHATDOESIT »

Sebguer wrote: post #41
lovellcw wrote: post #38

Earlier quoted context omitted.

Cuba exports terrorism and misery across the region. The dictatorships in Cuba, Venezuela, and Nicaragua fly under the radar these days, but are no less noxious to humanity than the regimes in Russia, Iran, NK, etc. You can argue whether or not sanctions are an effective way to promote regime change, or if they just hurt the regular citizens of rogue governments. I think they are often quite ineffective. But there's…

Cuba's biggest export is effectively doctors. But, sure, buy into decades old anti-communist propaganda!

These doctors need to be taught a lot and don't even care about proper hygiene (or as one of them told me "we care about hygiene, it just means something totally different in Cuba"), and don't know the first thing about modern medical procedures using modern technologies and tooling. It's nothing like US or European medical schools - it's like they went to a medical-oriented high school at best. In Europe we just send them to the school again, they can't even skip years or subjects.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#47

Post by vhgyu75e6u »

Sebguer wrote: post #41
lovellcw wrote: post #38

Earlier quoted context omitted.

Cuba exports terrorism and misery across the region. The dictatorships in Cuba, Venezuela, and Nicaragua fly under the radar these days, but are no less noxious to humanity than the regimes in Russia, Iran, NK, etc. You can argue whether or not sanctions are an effective way to promote regime change, or if they just hurt the regular citizens of rogue governments. I think they are often quite ineffective. But there's…

Cuba's biggest export is effectively doctors. But, sure, buy into decades old anti-communist propaganda!

Yes lets just swallow the Cuban propaganda that their medicine is somehow magical and more advanced that every other, and ignore the fact that their government have been surviving as a parasite from other countries, helping the dictators stay in power

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#48

Post by Nextgrid »

wil421 wrote: post #23
jbverschoor wrote: post #15

Don’t offload authentication to third parties… People didn’t learn their lesson from Facebook etc etc.

I’ll take SSO over manually logging into 8-10 company apps I use. If the team implementing an onprem SSS/IDP solution has deep domain knowledge and sys admin skills go for it. Had issues before and cloud based providers like Okta were much better, IMHO.

If Windows didn't turn into a shit-show post-Windows 7 I would prefer Active Directory over all of this mess. Log in once with your password or smartcard and that auth magically works across all applications without ever seeing a login screen or dozens of redirects to do the SAML flow, at least for internal tools. For external stuff, SAML/OIDC is kind of a necessary evil I think (I'm not sure if there's anything preventing external tools from interoperating with Kerberos).

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#49

Post by nickfromseattle »

I run a USA based SaaS and was mistakenly caught up in Auth0's 'sanctions'.

0. Production servers deleted

1. No logs, notifications or any indications of the issues

2. Can't get ahold of support on the free plan

3. Spend 1-2 weeks frantically trying to restore access to our customers

4. Find a random Auth0 support thread of someone who had the same issues

5. Auth0s response was to submit an affadavit to their legal team indicating I'm not sanctionable

6. Access restored after ~3ish weeks of downtime

Why was my SaaS caught up in sanctions?

I had a Russian developer deploy Auth0 two years ago (and hadn't logged in for 18+ months)

That was enough to get my production servers deleted with no warning.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#50

Post by Nextgrid »

kube-system wrote: post #16
capableweb wrote: post #8

Wow, and here I thought Okta had split up their service into US and non-US, like many other big companies, but seems they have not, so now just because the US has some arbitrary list of who can be a user, everyone using Okta needs to follow that... Seems like the laws are a bit outdated and haven't really been updated for a global internet, hope we see some changes in that direction.

There’s nothing “outdated” here. The OFAC Controls being applicable to business done over the internet is not an unintended effect.

I think the reason he calls it outdated is the definition of "business" becomes murky when it comes to online services and SaaS companies. Does servicing an HTTP request that appears to come from a sanctioned country (based on unreliable GeoIP data) actually count as "business" for sanctions purposes?
Post reply on HN