61–70 of 123 posts
Earlier quoted context omitted.
Right, AWS accounts created before September 2017 are coupled to amazon.com retail accounts. Accounts created after this are separate.
For those of us with coupled accounts, is there any way to separate them?
The downside of One True Identity is getting your startup data deleted from account A because account B was booted from Google for unclear TOS violation. Usually these issues can only get resolved by getting your blog post to HN
The horrifying part was that Google went on to ban every employee's personal account as well because they were "linked" to an account that was banned for TOS violations. Imagine losing access to your email, Android apps, and photo library because a coworker you may not even know broke some TOS.
A Google employee entered the thread and said they were investigating, but notably ignored anyone asking "is it really Google's policy to ban people's personal accounts if their employer gets banned?"
I was pretty happy when my company switched from G Suite to Office 365.
(Amazon allegedly isn't free of these "guilt by association" practices - I've heard stories of people getting permabanned from Amazon because their roommate or family member returned too much stuff, since the delivery address was the same.)
It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…
Do you though? Why not just setup a "apps@.com" and create a new account?
> and now her personal iMessages and emails are on it. It's stupid.
So just turn these services off? They aren't mandatory.
Some of these are legitimate grievances but it seems quite reasonable to have separate accounts for work and play. What I do despise is that my Amazon.com credentials are the same as my Amazon AWS root account credentials. They aren't equals. The services share the name of a rainforest and a very rich CEO but that's about where the similarities end for my part. I'd rather not have to plug in my AWS root account crede…
Without going into too much detail, this "coupled account" problem is taken very seriously internally (AWS Identity dev, my opinions are my own and I don't speak for the company). There is a very large project to fix this. But as you can probably imagine, with a system this large and complex making changes to fundamentals like identities is hard , and done with a lot of care. All new accounts created today are "decou…
I can say for certain that no, it is not something taken seriously.
I (loudly) complained to AWS enterprise support in 2017, 4 years ago, about this issue. Got escalated as high as could possibly be escalated (team leads of IAM calling my cell phone).
4 years later and the issue is unresolved. This is Amazon we’re talking about. There’s very little that can’t be fixed in 4 years.
The downside of One True Identity is getting your startup data deleted from account A because account B was booted from Google for unclear TOS violation. Usually these issues can only get resolved by getting your blog post to HN
Do they? We heard the cries for help, and we assume in most cases a Googler here on HN champions the caller. In fact, I'd like to see some metrics, a transparency report of false positive blocks/deletions which were reversed. But indeed, I absolutely do not want my personal projects to be related in any way to my work projects, nor vice versa.
For every user who gets saved by someone at Google seeing their story on HN or Twitter, how many users stay permabanned because they just aren't social media savvy enough (or lucky enough) to get traction?
I would guess that the majority of false positive bans never get resolved.
Binding these personality facets into a single person also has the disadvantage that if my account gets banned in one social context, the repercussions will touch the other contexts too. Will an oversensitive PC/abuse filter on one service ban me from all my Amazon-based access? I don't know, let's YOLO and find out.
It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…
Especially for the literal kids, use a child account. But also use a child account for the work machine so it can use your apps but isn’t your personal messages and photos.
It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…
> My girlfriend bought an iPad for the kids to watch TV. It's shared by a couple of people. She had to log in with her Apple ID to set it up, and now her personal iMessages and emails are on it. It's stupid. Apple considers iPads (and iPhones/Macs) as personal devices. You aren't expected to share an iPad, you're expected to buy an iPad for each user.
Categorically not true. iPads in particular can be set up for multi-user with hand off.
Shared iPad Overview: https://support.apple.com/en-gb/guide/mdm/cad7e2e0cf56/web
Shared iPad for Education: https://developer.apple.com/education/shared-ipad/
Shared iPad for Business (MSFT Intune MDM docs): https://docs.microsoft.com/en-us/mem/intune/enrollment/devic...
EXCEPT for the absolutely abysmal "customer service" and "issue resolution" provided by the likes of Amazon, Google, FB, etc. (as if those so-called services even rise to the level of the ordinary defnitions).
IFF they provided real humans, with real time and authority to look into and resolve issues, this might be a good idea.
But since, in the real world, their business model is obviously to provide only the most superficial figment of anything resembling an ability to resolve issues, any such linkage would be absolutely terrifying.
Any inadvertent slipup, or even getting innocently hacked already result in disastrous loss of access to your own data and privs. Just today, there's an HN story of such an unrecoverable loss on FB & Oculus [1]
The only solution in light of these hostile policies on the part of FAANGs and other big tech companies is maximum fragmentation/segmentation/sharding of accounts.
(I've already passed on invitations for an Amazon Biz acct, despite the fact that it might be quite useful for my biz, for exactly these reasons.)
Edit: add ref for [1] https://news.ycombinator.com/item?id=28249977
Earlier quoted context omitted.
Then Apple is either wrong, or being actively malicious with its products in order to sell more of them.
I mean it’s not really malicious to design a single-user system. At best it’s passively malicious. Sure, you can always share your personal pizza but you have to deal with the consequences that it was sized for one person and you both might be hungry after. Are you upset about the fact that you can’t have multiple isolated user-accounts on an iPhone?