News for hackers. Stuff that matters.
Re:Trello handed over my personal account to my previous com... by shashanktomar on Wednesday April 15, 2020 @01:04AM (#22874704)
From the comments, there is some confusion about why did i attach my personal email to a company account. That was not the case, let me clarify it. I created my personal account long before Trello was acquired by Atlassian. It did not have any SSO at that point and the login was with username and password. At some point, while working on a side project and to share it with a teammate, I attached a secondary email to my account and created few boards under it. This email was my companies email @company.com

The multiple account login used to work the same way it works for github now. The boards were very clearly labeled under the email/username they were created and clearly had the ownership well defined. As soon as I left the company and my email was disabled, all the boards under that email disappeared from my account. This was expected and kept using my primary email (i always used to login with my username) and completely forgot about an attached secondary email (which anyways is now deactivated). Fast forward 5 years with tons of personal boards under this account, one morning it stopped working without any notification (yes i revised my spam to be sure about it) with all my data gone.

Re:Trello handed over my personal account to my previous com... by taneq on Wednesday April 15, 2020 @04:14AM (#22875601)
Wow, their response is atrocious. It's basically just "Yes, that's right, there was a second email address attached to your account and the owner of the domain for that email set up SSO, so they now own your account. Try asking them nicely for it."

I started disentangling myself from Atlassian products a few years ago but I was still using Trello. Clearly that's going to have to stop.

Re:Trello handed over my personal account to my previous com... by bayindirh on Wednesday April 15, 2020 @08:39AM (#22876998)
Instead, I have a strict separation rule for these kind of services.

No work stuff is hosted in my personal accounts, and work accounts are always created with a separate e-mail. I can just remove myself from everything work related without touching anything personal.

While I was working with a small group, we had our own domain and e-mail addresses as a perk. My relationship went sour with the lead of the project and, as a power move, she disabled my e-mail and other accounts related to that group, guessing that a lot of stuff is connected to this e-mail (since the domain was prestigious in that circles) and doing so will hurt me a lot.

Since only things related to the group/work was on that e-mail, literally nothing happened. I just broke off cleanly from the group and, a move designed to hurt me brought bliss to the parting process.

Re:Trello handed over my personal account to my previous com... by 0x00000000 on Wednesday April 15, 2020 @10:12AM (#22877881)
Meanwhile on Facebook you cannot create a page for a business(say you work in the marketing department) without linking your PERSONAL account to it. Absolutely fucking insane.
Re:Trello handed over my personal account to my previous com... by pc86 on Wednesday April 15, 2020 @11:49AM (#22879190)
That's a completely different thing. One, Facebook is based around the concept of a real person being behind just about everything - when you administer a group, you can see which person posted the individual company/page posts. Two, nothing can happen to your personal account based on the actions of the company page or other people associated with it.
Re:Trello handed over my personal account to my previous com... by RonanTheGrey on Wednesday April 15, 2020 @12:34PM (#22879782)
> One, Facebook is based around the concept of a real person being behind just about everything - when you administer a group, you can see which person posted the individual company/page posts.

So do it the same way every other website on the planet does it: have an organization and users who have roles within that organization. It's beyond aggravating the way they have them so strongly linked.

> Two, nothing can happen to your personal account based on the actions of the company page or other people associated with it.

.... I'm guessing this hasn't happened to you. Yes, they will block your personal account for "certain" infractions committed by the business manager. Nearest I can tell it depends on how you set up the business. If you set up the business FB page first, your personal account is considered primary so all blame flows to it. If you set up the business manager first, and THEN set up the page using the business manager (NOT the page creator), then it won't affect your personal account; and if you invite someone, no, that person's account won't (generally) be affected either.

Except that FB always drives you to create the business PAGE first and LATER suggests the business manager... thus increasing the likelihood of blocks. It's pathological. Especially because you can blocked for nothing other than their AI misidentifies something in an ad or a post, kills all your accounts, and then you have to beg to get them back.

Point is, that relationship shouldn't exist in the first place.

Re:Trello handed over my personal account to my previous com... by caseysoftware on Wednesday April 15, 2020 @01:32AM (#22874843)
I have separate personal and work Trello accounts. After seeing your report, I checked to make sure they're still separate. They are but each have access to each others' boards.

I have yet to figure out how to deactivate that.. but since they're separate users (vs secondary email), I don't think the same will happen. But who knows? Not me.

Good luck getting this straightened out.

Re:Trello handed over my personal account to my previous com... by lifty on Wednesday April 15, 2020 @07:12AM (#22876439)
There is no shortage of atrocious examples, like this one, that prove that people need to take digital sovereignty seriously. Our data and our interactions should not be intermediated by some digital feudalistic lord, without any recourse when something goes wrong.
Re:Trello handed over my personal account to my previous com... by alexis_fr on Wednesday April 15, 2020 @01:50AM (#22874943)
Atlassian is not the only one who wrecked login by implementing SSO across all their instances.

I really don’t recommend using in-app dual logins (for example Gmail’s dual login), and stick to using separate Chrome profiles or Firefox profiles, so that none of the cookies are shared. Even with that, I’ve had surprises with my mobile phone number being the only shared information between two Google Ads accounts, and Google mixing my data, but avoiding sharing cookies is really important.

That is also what I recommend my employees. « You can use Facebook or Youtube at work, but not in the same Chrome profile. »

Re:Trello handed over my personal account to my previous com... by shock on Wednesday April 15, 2020 @03:34AM (#22875448)
> separate Chrome profiles or Firefox profiles, so that none of the cookies are shared.

You don't need separate Firefox profiles for that, you can use Firefox containers.

Re:Trello handed over my personal account to my previous com... by znpy on Wednesday April 15, 2020 @06:34AM (#22876244)
> You don't need separate Firefox profiles for that, you can use Firefox containers.

Firefox Containers are awful.

Only firefox profiles can give you true separation.

It would have been better if Mozilla had added a better interface to profiles.

Re:Trello handed over my personal account to my previous com... by ssorallen on Wednesday April 15, 2020 @08:18AM (#22876814)
> It would have been better if Mozilla had added a better interface to profiles.

Profiles in Chrome and their ease of use (Cmd+Shift+M to open a new window in a different profile) is the primary reason I still use Chrome over Firefox. I have a Personal, a Work, and a Development profile. The development profile is where I install dev extensions like React Devtools, Redux Devtools, etc. because they require full access to all sites in order to function. I don’t do regular web browsing with devtools installed. These tools seem trustworthy, but why risk giving them access to everything I do on the web?

I’ve tried Firefox Containers and can’t find the same power and ease of use Chrome Profiles have.

Re:Trello handed over my personal account to my previous com... by nilsandrey on Wednesday April 15, 2020 @11:14AM (#22878659)
I see your point now, I was preferring containers because I have this scenario where I want the data separation it provides without the need of reinstalling add-ons, especially on a temporal container/profile. The shared window can be nice on some particular moments where I don't need to have a lot of pages opened and are continuously changing from tab to tab.

Thinking over about you said, now I think I like things from the two worlds, maybe better interface to containers or even better UI for profiles, with options to overcome the containers (maybe should be better for the average user instead of having both).

For the time being, I prefer to have both options (don't have it now) but I think both can be improved.

Re:Trello handed over my personal account to my previous com... by alexis_fr on Wednesday April 15, 2020 @03:20PM (#22881889)
Upside of Chrome profiles: Use a bright red theme for prod sysadmin profile, and blue for work. So you never type « p... » on your work profile by mistake... Don’t laugh, usage is widespread.
Re:Trello handed over my personal account to my previous com... by ssorallen on Thursday April 23, 2020 @06:02PM (#22962071)
I do exactly this too: I have 3 distinctly different themes for the three profiles I use. A split second glance at the color of the tab bar informs me which profile I'm working with.
Re:Trello handed over my personal account to my previous com... by znpy on Wednesday April 15, 2020 @08:27AM (#22876892)
That might work well with you but Chrome is not free software nor open source.

One might argue that chromium is, but in my opinion using chromium only enforces google chrome

Re:Trello handed over my personal account to my previous com... by ssorallen on Wednesday April 15, 2020 @08:30AM (#22876922)
Free and open source is tangential to my point? I was commenting on the functionality of Chrome Profiles vs. Firefox Profiles + Containers.
Re:Trello handed over my personal account to my previous com... by omnimus on Wednesday April 15, 2020 @08:39AM (#22876992)
Why are Containers awful? Its great i use it all the time for this purpose.
Re:Trello handed over my personal account to my previous com... by diggan on Wednesday April 15, 2020 @11:19AM (#22878743)
I'm not znpy so I don't know why they don't like containers.

But I prefer profiles myself, as I have different extensions in different profiles and I get the two completely separate instances of Firefox, while containers are just separate tabs instead.

I don't think containers are awful though, they are just less useful for my use case than profiles.

Re:Trello handed over my personal account to my previous com... by cssinate on Wednesday April 15, 2020 @11:32AM (#22878922)
I sometimes have issues with the profiles too though. If I have both profiles running concurrently and I click a link from a different application, I get an error that "Firefox is already running" and it freezes up the window with my primary profile.

Do you ever experience that?

Re:Trello handed over my personal account to my previous com... by diggan on Friday April 17, 2020 @07:58AM (#22898226)
Strange, haven't had that issue myself, running firefox-75.0-1 on Arch Linux. You probably should report that to Mozilla, if you can.
Re:Trello handed over my personal account to my previous com... by dhimes on Wednesday April 15, 2020 @06:56AM (#22876342)
Thanks for this. I've been naively using containers. Yes, a UI for profiles would be awesome- we've been wanting that for a long time.
Re:Trello handed over my personal account to my previous com... by diggan on Wednesday April 15, 2020 @07:30AM (#22876541)
You can either start firefox with `-P` to the profile chooser when starting firefox, or navigate to `about:profiles` to show the UI for managing them.

Would allow greater discovery if this `about:profiles` page was exposed somewhere in preferences, but at least there is something I guess.

Re:Trello handed over my personal account to my previous com... by dhimes on Wednesday April 15, 2020 @08:48AM (#22877070)
I just almost always start firefox with a mouse click- even on fluxbox :/
Re:Trello handed over my personal account to my previous com... by the_pwner224 on Wednesday April 15, 2020 @09:40AM (#22877548)
$ cd ~/.local/share/applications

$ cp /usr/share/applications/firefox.desktop .

$ vim firefox.desktop

Add -P onto the end of the 'Exec' line. Now your click button for firefox will open the profile manager.

Re:Trello handed over my personal account to my previous com... by dhimes on Wednesday April 15, 2020 @01:50PM (#22880780)
awesome!
Re:Trello handed over my personal account to my previous com... by diggan on Wednesday April 15, 2020 @09:26AM (#22877417)
If you dig around, there is probably a value in `about:config` that lets you tell firefox to always show the profile selector first. Otherwise, add `-P` to the argument fields in your desktop shortcut.
Re:Trello handed over my personal account to my previous com... by znpy on Wednesday April 15, 2020 @08:28AM (#22876906)
thanks! I didn't know about `about:profiles` !
Re:Trello handed over my personal account to my previous com... by usr1106 on Wednesday April 15, 2020 @07:34AM (#22876559)
> Firefox Containers are awful.

Any details, how do they leak?

> Only firefox profiles can give you true separation

I don't think they would help a lot against fingerprinting. (I have no idea how commonly used fingerprinting is at the moment.)

Re:Trello handed over my personal account to my previous com... by WorldMaker on Wednesday April 15, 2020 @12:23PM (#22879641)
> Any details, how do they leak?

Extensions, mostly. You have to be real careful which extensions you install because extensions run at the window level (mostly) rather than the container level and see across/through containers.

Also things like auto-fill (including password suggestions); if you like that being very specific to context, then you'd want different profiles rather than containers.

I've found I've been using a mixture of profiles and containers, myself, to balance ease of access (containers are fast to launch and can auto-launch per specific sites) versus better extension control and auto-fill/etc separation.

(ETA: As for finger-printing, both containers and profiles are equal on the most common finger-printing: cookies and localStorage. Neither protects you well from IP Address tracking, which is a growing concern, but not the approach of at least the big players like Google or Facebook, yet.)

Re:Trello handed over my personal account to my previous com... by Deebster on Thursday April 16, 2020 @01:11AM (#22886283)
> Firefox Containers are awful

Do you have any sources or reasons for this condemnation?

Re:Trello handed over my personal account to my previous com... by diggan on Wednesday April 15, 2020 @04:05AM (#22875566)
True, but by using profiles you don't need any extra extensions, it comes built-in in both Chrome and Firefox, you can simply start it with providing the `--profile <path>` flag. Correct me if I'm wrong, but some IT environments also lock down installing extensions from addons.mozilla.org, so the profiles tip would be applicable to more people.
Re:Trello handed over my personal account to my previous com... by znpy on Wednesday April 15, 2020 @06:39AM (#22876263)
You can just use --profile <name> -- with only the name of the profile.

Also, you can backup/restore/move profiles independently of each other.

Also, you can have different network settings for different profiles (not sure you can do that with containers).

For example I have a profile whose network connections are such that traffic is forwarded through a socks proxy (implemented via ssh). That's basically an ultra-simple vpn. I can then (via a script) automatically launch the tunnel open firefox with the appropriate profile and then exit firefox and gracefully stopping my tunnel.

Re:Trello handed over my personal account to my previous com... by Kaze404 on Wednesday April 15, 2020 @06:32AM (#22876234)
Firefox Containers are a native feature now.
Re:Trello handed over my personal account to my previous com... by diggan on Wednesday April 15, 2020 @07:28AM (#22876525)
I remember it used to be a native feature but I'm fairly certain they split it out into a separate addon after a while. Or did they move it back into core?
Re:Trello handed over my personal account to my previous com... by the8472 on Wednesday April 15, 2020 @08:48AM (#22877077)
The basic functionality is in the core. (about:preferences -> search for "container"). But for better UI there is an extension.
Re:Trello handed over my personal account to my previous com... by WorldMaker on Wednesday April 15, 2020 @12:31PM (#22879744)
Partly because Mozilla is continuing to iterate/experiment on the container UI and leaving that to extensions is a way to keep that laboratory open. They seem worried the UI may be too confusing if it was on by default for a lot of users. (Like the era decades ago when -ProfileManager was on-by-default in some installs.)

Mozilla even has two official extensions, trying to explore the space of ease of use/user expectations. In addition to the main multi-container extension they offer Facebook Container which is an extension designed to be more entry level but for folks worried about privacy. (It does what it says on a tin, creates only one additional container, names it Facebook, and automatically moves all Facebook tabs and pretty much only Facebook tabs into it.)

Re:Trello handed over my personal account to my previous com... by syshum on Wednesday April 15, 2020 @09:25AM (#22877408)
The problem I have with profiles is it is Browser Wide,

I like to have several Container Tabs open all logged in to different accounts at the same time

Re:Trello handed over my personal account to my previous com... by KingOfCoders on Wednesday April 15, 2020 @04:38AM (#22875706)
We had the same with Amazon, we created a new Amazon account but shared the telephone number. Support sent emails to the first account concerning the second account.
Re:Trello handed over my personal account to my previous com... by sneak on Wednesday April 15, 2020 @05:03AM (#22875817)
I have stopped giving out phone numbers to services. I can get throwaway email addresses (eg anonaddy.me, which is great) but burner numbers incur a significant time and cost, so I just don’t use services that demand one now.

Google Accounts fall into this category these days. Possible I’ll deprecate my use of those, as I don’t use gmail or drive any longer.

Re:Trello handed over my personal account to my previous com... by StreamBright on Wednesday April 15, 2020 @08:43AM (#22877023)
I had to use GDPR to force them to delete one of my accounts because my account got stuck in the registration where I could not complete the registration and could not delete the registration either. First time I used GDPR for anything. Support did not understand the situation, I waked through them the issue with screenshots, nothing.
Re:Trello handed over my personal account to my previous com... by dotancohen on Wednesday April 15, 2020 @10:22AM (#22878023)
Serious question as someone who does not use any "cloud" services: Did you not have a backup of your data in Trello? Orthogonal to the issue of account ownership, on which I stand firmly in your favour, did you not have a backup of the data? What would happen if Trello went bust, or somehow otherwise lost your data?
Re:Trello handed over my personal account to my previous com... by dotancohen on Thursday April 16, 2020 @01:19PM (#22891515)
I would love to know why this was downvoted.

I have all my data backed up. I won't use a device or service that does not allow me to back it up.

Re:Trello handed over my personal account to my previous com... by TLightful on Wednesday April 15, 2020 @06:31AM (#22876228)
Wow. Bye bye, Atlassian. Moving immediately.
Re:Trello handed over my personal account to my previous com... by lowwave on Wednesday April 15, 2020 @12:25PM (#22879667)
take a look at https://wekan.github.io

Nice open source self hosting alternative.

Re:Trello handed over my personal account to my previous com... by ernsheong on Wednesday April 15, 2020 @09:32AM (#22877460)
I created a Trello alternative, check it out at https://www.kanrails.com

Would love to get feedback!

Re:Trello handed over my personal account to my previous com... by Assisting on Wednesday April 15, 2020 @10:55AM (#22878429)
First piece of feedback, don't suggest somebody use a work email and company name on a Trello alternative right after this debacle happened.
Re:Trello handed over my personal account to my previous com... by stronglikedan on Wednesday April 15, 2020 @11:51AM (#22879206)
I'd say don't require it, and it's not required in this case. In the context of the tool, it does make sense to suggest it.
Re:Trello handed over my personal account to my previous com... by ernsheong on Wednesday April 15, 2020 @08:54PM (#22884989)
Thanks for the feedback. I will consider removing it. KanRails wants to be a B2B tool, not another Trello. It was just a recommendation.
Re:Trello handed over my personal account to my previous com... by delfinom on Wednesday April 15, 2020 @01:49PM (#22880763)
From the signup page >Work email is recommended.

Yea...so how does this solve OP's problem. Also desperation for sales leads eh?

Re:Trello handed over my personal account to my previous com... by ernsheong on Wednesday April 15, 2020 @08:55PM (#22884990)
Thanks for the comment. You can put in your personal email and it would work just fine.