Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

support.okta.com

Post reply on HN
Print view View original

51–60 of 170 posts

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#51

Post by practice9 »

dvfjsdhgfv wrote: post #40
fefe23 wrote: post #30

Note how Russia is not on the list.

I don't understand the reason for that. Somehow it is OK to do business with Cuba which are not threatening anyone but not with Russia that is killing people en masse?

Most still hope for return to "business as usual". Which IMO won't happen this decade, and probably next decade as well.

see Roblox, Valve (Steam), Cloudflare, Patreon and many more who didn't leave Russia: https://som.yale.edu/story/2022/over-1000-companies-have-cur...

^ Not on the same level as IBM working with Nazis, but still morally questionable

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#52

Post by mschuster91 »

benjaminjosephw wrote: post #2

So it turns out that when you outsource auth, you also outsource some of the governance on who can access your platform. Isn't access control a set of patterns rather than a service? When did it stop being a core competency of web applications?

> When did it stop being a core competency of web applications?

Turns out, login is surprisingly hard. It will be the first and most important focus point for attackers - SQL injections, DDoS attacks, captchas, griefers intentionally using wrong passwords to lock someone else out... with Okta and other products of its kind, all an application developer needs to do is to check some token.

Another huge part is that in the "old" world there was only one player for any kind of centralized authentication: LDAP. While there were and are multiple LDAP server implementations (OpenLDAP, MS AD, Samba and a bunch of smaller ones), only Microsoft's AD has a somewhat comfortable and usable management application - but even that is using old-school Windows UI and you need a MS desktop to manage it. Everyone else? Either use Apache Directory Studio, some barely working web management UI (phpldapadmin, GOsa) or heaven forbid plain LDIF files.

In contrast, working with anything of the "modern authentication" solutions is a breeze.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#53

Post by qwerty456127 »

nickfromseattle wrote: post #49

I run a USA based SaaS and was mistakenly caught up in Auth0's 'sanctions'. 0. Production servers deleted 1. No logs, notifications or any indications of the issues 2. Can't get ahold of support on the free plan 3. Spend 1-2 weeks frantically trying to restore access to our customers 4. Find a random Auth0 support thread of someone who had the same issues 5. Auth0s response was to submit an affadavit to their legal t…

Automated enforcement is evil and must be banned (except in situations when the violations themselves mostly are automated and come in unbearably huge quantities).

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#54

Post by arinlen »

imwillofficial wrote: post #45
lovellcw wrote: post #38

Earlier quoted context omitted.

Cuba exports terrorism and misery across the region. The dictatorships in Cuba, Venezuela, and Nicaragua fly under the radar these days, but are no less noxious to humanity than the regimes in Russia, Iran, NK, etc. You can argue whether or not sanctions are an effective way to promote regime change, or if they just hurt the regular citizens of rogue governments. I think they are often quite ineffective. But there's…

“Cuba exports terrorism and misery across the region.” ::walks away whistling hoping you don’t notice Iraq and Afghanistan’s blown up weddings::

https://en.wikipedia.org/wiki/And_you_are_lynching_Negroes

Feel free to start a discussion on US aggression, if you honestly feel strongly about it.

Otherwise you're blatantly trying to whitewash decades of systematic oppression from totalitarian bloodthirsty regimes, and in the process support all the human rights violations they're continuously subjecting their population to.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#55

Post by philliphaydon »

Nextgrid wrote: post #48
wil421 wrote: post #23

Earlier quoted context omitted.

I’ll take SSO over manually logging into 8-10 company apps I use. If the team implementing an onprem SSS/IDP solution has deep domain knowledge and sys admin skills go for it. Had issues before and cloud based providers like Okta were much better, IMHO.

If Windows didn't turn into a shit-show post-Windows 7 I would prefer Active Directory over all of this mess. Log in once with your password or smartcard and that auth magically works across all applications without ever seeing a login screen or dozens of redirects to do the SAML flow, at least for internal tools. For external stuff, SAML/OIDC is kind of a necessary evil I think (I'm not sure if there's anything prev…

Windows 11 is so much superior to 7 in every way.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#56

Post by wil421 »

Nextgrid wrote: post #48
wil421 wrote: post #23

Earlier quoted context omitted.

I’ll take SSO over manually logging into 8-10 company apps I use. If the team implementing an onprem SSS/IDP solution has deep domain knowledge and sys admin skills go for it. Had issues before and cloud based providers like Okta were much better, IMHO.

If Windows didn't turn into a shit-show post-Windows 7 I would prefer Active Directory over all of this mess. Log in once with your password or smartcard and that auth magically works across all applications without ever seeing a login screen or dozens of redirects to do the SAML flow, at least for internal tools. For external stuff, SAML/OIDC is kind of a necessary evil I think (I'm not sure if there's anything prev…

Sheesh the redirects. My HSA bank has the most I’ve ever seen, even Safari screams sometimes about too many redirects.

Can you use AD on Chrome in Windows to login to a web app? Would it be for internal apps only?

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#57

Post by qwerty456127 »

myth_drannon wrote: post #9

It's sad that people in occupied regions of Ukraine are punished twice, by Russian government and by US government too.

They had plenty of time to move to whatever they prefer - unoccupied territories of Ukraine or legitimate territories of Russia. As far as I know they traveled both ways routinely but returned voluntarily every time.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#58

Post by chinathrow »

So here's a good reminder for devs/startups on their free plans (I am using Auth0 on their free plan):

- Have a copy of all your users e-mail within your own infrastructure (DB)

- Have proper backups in place

- Verify regularly that your backups function correctly (backup AND restore)

In case your account get's deleted, you can rebuild from these.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#59

Post by pixel16 »

Sebguer wrote: post #42
hx833001 wrote: post #35

Earlier quoted context omitted.

Meaning there are many Cuban refugees living in Florida who hate the Communist regime and will not support a President who does not continue the sanctions. No political party wants to lose Florida, therefor politicians have a good reason to continue US policy.

Florida's days of being a swing state will likely be over by the next presidential election. Desantis won by tight margins, but he seems to have done a great job attracting exactly the sort of people who'd vote for him to the state and has consistently worked to gerrymander and restrict voting rights for those who'd vote against him. Crist couldn't even beat Rick Scott for the Senate, and Scott was one of the least p…

Bill nelson ran against Rick scott not charlie christ.

Re: Okta and Auth0 Blocking Cuba, Iran, N Korea, Syria, Crimea, Luhansk, Donetsk

#60

Post by rpgfugees »

wil421 wrote: post #22
myth_drannon wrote: post #9

It's sad that people in occupied regions of Ukraine are punished twice, by Russian government and by US government too.

I’ve seen videos where captured Russian soldiers are actually conscripts from the contested regions. I would think they have a lot more to worry about than okta authentication.

No post body was provided.
Post reply on HN