Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

AWS doesn’t know who I am

ben11kehoe.medium.com

Post reply on HN
Print view View original

91–100 of 123 posts

Re: AWS doesn’t know who I am

#91

Post by contravariant »

Spivak wrote: post #74
contravariant wrote: post #70

Earlier quoted context omitted.

Oh wow, I've seen some mind bending arguments so far but I sure didn't expect you to defend Apple's condescending way of telling their customers what to do by telling people how they should eat their pizza.

I actually meant the opposite. Nobody is going to stop you from sharing your personal pizza, like it’s yours do whatever you want. But it’s weird to complain to the pizza joint about the portion sizes and that you’re still hungry after splitting one. Like Apple isn’t misleading anyone, you know when you buy it that it’s a single user system with all the downsides that entails. It’s fine to say “I think Apple should s…

Sure not buying Apple is always a solution but if we're continuing the pizza analogy then surely a restaurant that would refuse to bring you an extra plate and tableware would be considered to have bad service?

Re: AWS doesn’t know who I am

#92

Post by donmcronald »

Terretta wrote: post #68
Aaargh20318 wrote: post #51

Earlier quoted context omitted.

> My girlfriend bought an iPad for the kids to watch TV. It's shared by a couple of people. She had to log in with her Apple ID to set it up, and now her personal iMessages and emails are on it. It's stupid. Apple considers iPads (and iPhones/Macs) as personal devices. You aren't expected to share an iPad, you're expected to buy an iPad for each user.

> Apple considers iPads (and iPhones/Macs) as personal devices. You aren't expected to share an iPad, you're expected to buy an iPad for each user. Categorically not true. iPads in particular can be set up for multi-user with hand off. Shared iPad Overview: https://support.apple.com/en-gb/guide/mdm/cad7e2e0cf56/web Shared iPad for Education: https://developer.apple.com/education/shared-ipad/ Shared iPad for Business…

That doesn’t work for a personal account.

Re: AWS doesn’t know who I am

#93

Post by dukeyukey »

Spivak wrote: post #56
dukeyukey wrote: post #54

Earlier quoted context omitted.

Then Apple is either wrong, or being actively malicious with its products in order to sell more of them.

I mean it’s not really malicious to design a single-user system. At best it’s passively malicious. Sure, you can always share your personal pizza but you have to deal with the consequences that it was sized for one person and you both might be hungry after. Are you upset about the fact that you can’t have multiple isolated user-accounts on an iPhone?

My bet is that the user research would say the cast majority of iPhone usage is indeed personal, but that a major amount if iPad usage is shared, especially among children (and even moreso in poorer areas where an iPad-per-child isn't affordable). And I'd bet Apple knows this, but wants to maintain the fiction to encourage more sales.

It's like Amazon waiting forever to include Chromecast functionality to sell more Fire Sticks. I understand, but it's still degrading the user experience, and that just grates my cheese.

Re: AWS doesn’t know who I am

#94

Post by b112 »

nl wrote: post #36
b112 wrote: post #29

Earlier quoted context omitted.

Isn't having more than one Gmail account a violation too?

It's not a violation to have more than one Google Account - there is the (pretty horrible) account switcher for that scenario.

Do you mean the login screen with a list of accounts, used from the browser? Or Android's multiple accounts ability?

That doesn't mean more than one account per person is OK though. Just the reality than more than one person may share a device.

Re: AWS doesn’t know who I am

#95

Post by teddyh »

wisty wrote: post #27
yarcob wrote: post #25

It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…

Or see people who "spammed" emotes into a Youtube livestream getting caught by spam detection and locked out of gmail.

And, IIRC, they only did it because the YouTube streamer (i.e. the channel host) asked them to do it!

Re: AWS doesn’t know who I am

#96

Post by __david__ »

Aaargh20318 wrote: post #89
ctvo wrote: post #59

Earlier quoted context omitted.

> Are you upset about the fact that you can’t have multiple isolated user-accounts on an iPhone? The iPhone was mentioned once, to connect it’s not possible on either iPhone or iPad. This is about the iPad, a completely different class of device, where it makes sense it would be shared, at least within a family, and has nothing to do with personal pizzas. It'a small point here, but the way you moved the goal post so…

> This is about the iPad, a completely different class of device, where it makes sense it would be shared, at least within a family, and has nothing to do with personal pizzas. It would be very awkward, even if you had multiple user accounts. How do you deal with things like notifications on the lock screen for messages, which can be very personal. There is so much personal stuff on my iPad, it would be like sharing…

iOS doesn't show messages on my phone lock screen until it's authenticated me via Face ID. Presumably on a theoretical multi-user iPad, it'd do Face ID and then show me _my_ lock screen messages and not anyone else's who happens to have an account.

Sharing a computer doesn't mean keeping personal information off of it, it just means you want a device that respects your personal information and keeps it private (non-readable by other user accounts) by default.

Re: AWS doesn’t know who I am

#97

Post by nitwit005 »

Every service that knowns something about your identity has the potential to leak it due to a security problem. It's better to just not have access.

This also seems like an IT headache. If you tie an identity to some test user, it has to get cleaned up somehow if you leave the job.

Re: AWS doesn’t know who I am

#98

Post by [deleted] »

saba2008 wrote: post #75
mbesto wrote: post #63

Earlier quoted context omitted.

> I need to log in with my personal credentials to download software from the Mac App store. Do you though? Why not just setup a "apps@ .com" and create a new account? > and now her personal iMessages and emails are on it. It's stupid. So just turn these services off? They aren't mandatory.

Registering AppleID involves phone number checking. In some countries getting one without exposing personal information is not trivial.

[deleted]

Re: AWS doesn’t know who I am

#99

Post by vageli »

yarcob wrote: post #25

It's good that every service has separate credentials. For a counterexample, consider Apple and how they try to restrict you to a single Apple ID. They want everything to be tied to a single person. Every service you use is tied to your Apple ID. It just doesn't match the way that people use computers. For example, I get my computer games and business software billed to the same card, and there's no easy way to chang…

> It's shared by multiple people. I need to log in with my personal credentials to download software from the Mac App store.

I thought this was solved with managed Apple IDs? https://support.apple.com/en-us/HT210737

Re: AWS doesn’t know who I am

#100

Post by scrollaway »

ggm wrote: post #35
scrollaway wrote: post #31

Earlier quoted context omitted.

Because they're namespaced by which AWS account you connect to, same as Slack and many more enterprise products. You don't have an AWS account. You have an IAM identity and credentials for an AWS account. Except for the root account where what you described is never the case.

I absolutely do think that reasonable ordinary people find this situation confusing. As do password managers. IAM identity is not exactly a widespread understood concept. I doubt if most people entirely "get" the distinction. Google (our instance) pretty much forbids crossbinding like this. I've had non google accounts refused as bootstrap identity in ads and gke because they were just used elsewhere on Google for au…

You should be deleting IAM identities you do not use. At the source, not just from the password manager but actually deleting the accounts/secret keys/passwords/whatever.

Also AWS isn't exactly for "reasonable ordinary people", it's a tool that requires some minimum amount of training. Yes the concept isn't super widely used for end user applications (although 1Password is a good example of another such "you have an account on an instance, that is unrelated to your account with the same email on another instance" concept). And yeah I do wish password managers would handle that better, but for anything that uses subdomain-level separation (example.1password.com vs amazon's signin.aws.amazon.com with multiple fields), it generally works out fine.

Post reply on HN