Re:Auth0 Down
by nightowl_games on Tuesday April 20, 2021 @01:12PM
(#26877462)
Wow. The whole point of paying someone like Auth0 is to _not_ have this happen. This is basically their whole point, is it not? Really looking forward to the post-mortem, but I won't ever forget just how down this thing is right now.
[ Parent
| on HN ]
Re:Auth0 Down
by williamdclt on Tuesday April 20, 2021 @05:02PM
(#26881625)
I suppose the point is that you get one 5h outage every other year _and_ you get to blame somebody else, rather than more regular ones because it's not really your core competency
We all know that all 3rd parties will have outages at some point, nobody's pretending otherwise
Re:Auth0 Down
by TrogdorTheMan on Tuesday April 20, 2021 @03:00PM
(#26879608)
Yup, exactly. We're actively working on ripping them out of our software, this is ridiculous. I knew we should have taken the time to make a fail safe...sigh...
> The whole point of paying someone like {insert cloud provider} is to _not_ have this happen.
Being in the cloud doesn't mitigate potential issues.
Re:Auth0 Down
by SketchySeaBeast on Tuesday April 20, 2021 @05:03PM
(#26881628)
It just means that I can point to someone else when the site goes down and can't do anything to get it back up. Like Auth0 today, or Microsoft a couple of weeks ago.
The whole point for me is that I don't want to be responsible for user credentials. I don't trust the security of my app.
If you don't trust your app with credentials how can you trust your app with what those credentials are used to access?
If I get hacked I don't want to leak my users' passwords. The rest I couldn't care less about. It's nothing of value.
Basically every platform and framework has good salting and hashing built in. Usually it's scrypt, bcrypt or agron2.