News for hackers. Stuff that matters.
Re:Goodbye Auth0 by rollulus on Thursday February 15, 2024 @05:28AM (#39381054)
I don’t get it why the US company layoff culture is so different from what I’m familiar with, the European one. What are they afraid of that people need to be locked out? That one brings a gun to work? Here you get laid off, get a notice, are expected to continue working for a while (but depending on your work ethic you’ll take it easy), consume your remaining PTO, complain to your coworkers about what happened during a farewell dinner. So much more humane.
Re:Goodbye Auth0 by sokoloff on Thursday February 15, 2024 @07:39AM (#39381960)
At my second job, the company terminated an employee for poor performance and intended to let them stay on a short term to wrap things up and then start their severance. The first evening (or maybe the first Friday evening), that dev stayed late in the office and deleted the source trees from as many machines as he could get access to (this was 1996, so most machines didn't have logins) and destroyed the hard drive on the revision control server.

That experience (and the amount of loss and wasted time in reconstructing as best we could) heavily colored my view of the risk-reward ratio of letting terminated employees have continued access to premises and systems.

If I have any doubts about the future behavior of someone who just received very shocking, disorienting, and angering news, it is my job to protect the company and other employees much more than it is to allow the terminated employee continued access.

Re:Goodbye Auth0 by madsbuch on Thursday February 15, 2024 @07:50AM (#39382052)
Given that this is the US, he was probably sued and is still in prison.

Also, this is an insanely childish way to act – again to the original commenter. It it seems like there is a difference in US an EU culture here.

Re:Goodbye Auth0 by dylan604 on Thursday February 15, 2024 @10:20AM (#39383711)
> Given that this is the US, he was probably sued and is still in prison.

Like most things in life, it depends. You'd have to get a prosecutor to agree to accepting the case to bring charges against the individual. They'd have to decide if there was enough evidence, they'd have to decide if they thought they could convince a judge/jury, then they'd have to decide if it was even worth their time. In 1996, that might have been a more difficult thing to do than today.

> Also, this is an insanely childish way to act

Yeah? And? So? Are you attempting to say that no non-American has ever acted irrationally or childish? I have a few history books that would disagree

Re:Goodbye Auth0 by michaelcampbell on Thursday February 15, 2024 @10:34AM (#39383913)
> Also, this is an insanely childish way to act – again to the original commenter. It it seems like there is a difference in US an EU culture here.

It is, but safety protocols are put in for the extreme unexpected case. "Regulations are written in blood" and all that.

Not all Americans are childish any more than no EU citizens are.

Re:Goodbye Auth0 by supriyo-biswas on Thursday February 15, 2024 @07:46AM (#39382028)
Also see the case of Shannon You[1] where the person in question leaked the trade secrets for BPA production used in soft drink cans for being fired.

[1] https://www.justice.gov/usao-edtn/pr/phd-chemist-sentenced-1...

Re:Goodbye Auth0 by anonexpat on Thursday February 15, 2024 @08:20AM (#39382329)
You’s case was deliberate corporate espionage, not a disgruntled former employee.
Re:Goodbye Auth0 by Draiken on Thursday February 15, 2024 @08:30AM (#39382438)
So because the company hired a criminal sociopath, every other person laid off until the end of times must be treated the same way? Certainly there are better ways to handle even this crazy scenario you mentioned.

That feels so inhumane to me. If you don't see your employees as humans, instead as mere resources and, as soon as they are laid off, threats, then we can say it makes sense.

Re:Goodbye Auth0 by coredog64 on Thursday February 15, 2024 @09:54AM (#39383351)
I had a coworker who wasn’t even laid off and did something along these lines* on his last day because he felt hard done by.

*Deleted the configuration from the core network switch.

Re:Goodbye Auth0 by dylan604 on Thursday February 15, 2024 @10:26AM (#39383793)
So just a typical AWS us-east-1 employee then on a random day?
Re:Goodbye Auth0 by ianhawes on Thursday February 15, 2024 @09:09AM (#39382878)
Similar things have happened in my ~12 year career which leads me to believe it is not as uncommon as your comment would portray it.

The first instance I can recall, a developer was terminated and his access was revoked. He goes home, waits until midnight, then tries logging into as many systems as he can. He apparently had saved a WordPress password on his Google Drive. He logs into WordPress and defaces a bunch of pages on the corporate website. FWIW he was one of my reports and he did not come off as a sociopath or unstable and his actions surprised me.

Second instance at a different startup, a marketing guy is terminated but was allowed to hang out at the office for a bit (for some reason management decided to fire him on a Thursday morning knowing he carpooled with several other employees). I felt bad so I took him out to lunch. At lunch he tells me he had a feeling he was about to be fired so he dumped the ~400K+ database of emails in our HubSpot account to sell to a competitor. I told him that was easily the dumbest idea he's ever had. I text the CEO from the bathroom to warn him. He's trespassed from the building upon our return. Oh, and he suspected I tipped them off and so he keyed my car.

Third instance at my own company, I terminated a contractor and removed their access to all services immediately. They attempt to run a series of reports on vendors, contractors, and other sensitive data from the admin UI without realizing their session was invalidated. I get the error notifications and add more granular permissions to the admin panel.

Is it inhumane? No. Is it rude? Yes. I think you have no choice _but_ to treat these people as humans. Humans do human things and act out for a variety of reasons and you have to expect that. Are they inherently bad people? No.

Re:Goodbye Auth0 by Draiken on Thursday February 15, 2024 @09:47AM (#39383274)
I can definitely understand that assuming everyone is not a sociopath is very naive. But the reason I say this is inhumane is not about the security implications.

There's a whole plethora of issues around layoffs that are often ignored. I recall looking at Slack's people list constantly to see which accounts were suddenly marked as "deactivated". People I had great relationships with but never exchanged personal emails simply gone. That dread of "what the fuck is happening" and "am I next?" overcoming you. Some people scramble to create sheets with contact information from those who were laid off.

That's absolutely inhumane.

I survived 3 layoffs in the past few years and I can still distinctly remember the awful feeling each of those left me with. I can only imagine how much worse that is for those affected.

We can separate the security parts from the human parts. Companies choose not to do that, for whatever reason that I simply cannot understand. Especially companies with so called "human resources" should be extremely prepared for situations like this, to make sure everyone is actually treated well.

Recently we had that viral video of a person that recorded themselves getting fired with zero reasoning of why. That's the kind of shit that happens with these layoffs. Bad management at its worst.

In short, I agree with you with regards to security implications. But those can be solved with proper access controls and planning. What I don't agree with is everything else around it. Not once I have seen companies laying off people handle this in any manner that I would describe as humane.

We can do better, I don't know why we don't.

Re:Goodbye Auth0 by sokoloff on Thursday February 15, 2024 @09:50AM (#39383318)
> Especially companies with so called "human resources"

Never forget that "human" is an adjective in that phrase, not a noun. HR's duty and focus is on serving and protecting the company, not the employees.

Re:Goodbye Auth0 by dylan604 on Thursday February 15, 2024 @10:30AM (#39383857)
You don't have to be a sociopath or a criminal to be able to do harm to a company. There are some positions where clients loyal to the person rather than the company like sales or some form of producer/manager depending on the industry.

There are stories of sales teams going in and grabbing their rolodex (instantly dating the stories) so they could use the contacts where ever they land next. They could also reach out to the contacts to attempt to poison them towards the company, libel be damned.

Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @08:35AM (#39382505)
Is that the lesson to learn here, really? An employee makes a stupid thing and the leadership didn't look into its security practices to avoid this type of attack?
Re:Goodbye Auth0 by ianhawes on Thursday February 15, 2024 @08:52AM (#39382682)
The lesson here is that once an employee or contractor is terminated, you remove all access to internal infrastructure. That's it. That is the lesson.
Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @09:03AM (#39382797)
Then your company is still susceptible to being destroyed by any random employee.
Re:Goodbye Auth0 by dylan604 on Thursday February 15, 2024 @10:24AM (#39383768)
Potentially, yes. Someone could go nutty before being dismissed, and it just be Tuesday. That's why there's things we often refer to in this industry as backups. If it is just a software bit of mischief, you should be able to recover from that without too much down time. s/disgruntled employee/ransom ware/ and it's really no different.
Re:Goodbye Auth0 by makeitdouble on Thursday February 15, 2024 @09:16AM (#39382955)
Not "terminating" your employees and having meaningful conversations on how it goes after they know they're let go helps a lot.

That forces the employer to come up with actual explainations someone can digest, and gives the employee time to be rational and plan the pivot.

There will still be ugly stories, and preemptively removing accesses will be needed in some cases, but that's by far the exception and not the norm, and we usually know when that will be the case.

Re:Goodbye Auth0 by yjftsjthsd-h on Thursday February 15, 2024 @09:44AM (#39383250)
> and the leadership didn't look into its security practices to avoid this type of attack?

It sounds like they very much did, starting with physical security. Especially in that time period, physical access was probably the biggest component even.

Re:Goodbye Auth0 by osmano807 on Thursday February 15, 2024 @09:16AM (#39382950)
The lesson to learn is to entrench fail-deadly protocols in as much infrastructure as possible in case of termination.
Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @09:32AM (#39383119)
> in case of termination

The lesson is that employees should only have access to the resources that they need to do their job at all times, and that there should be a fine-grained permission system to check if someone can read or read-write to all these resources.

Even when I am working on my projects, by myself, I use different accounts to access my services, depending on the role. At first it might seem crazy, but if you learned how to do this and you automate this process, it is a life-saver if you suddenly find yourself need quick help from some contractor or if you want to give a backup key to a trusted friend as a way to say "here is what you need to do in case something happens to me".

Re:Goodbye Auth0 by smugglerFlynn on Thursday February 15, 2024 @02:09PM (#39387032)
If your crazy ex steals your watch on the way out, does it mean all new people you meet will get a frisk search at the end of each date?

That’s not how trust works, regardless of potential consequences.

Re:Goodbye Auth0 by sokoloff on Thursday February 15, 2024 @03:16PM (#39388137)
No, but you probably do get your key back immediately after your next breakup.
Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @06:04AM (#39381308)
Americans don't understand/trust/respect institutions.

Because they don't trust institutions, if someone that is working for a company and does something bad, or is shown to be corrupt, it will affect the public perception of the company, not of the individual.

Also, because Americans don't trust institutions, a lot of the internal processes and cultural values are upheld by the individuals, and how strongly this is done depends on the individual's power and ability to influence. This applies to all levels of the organization. This allows for the organization as a whole to be more dynamic and effective, but the downside is that this works only when the individuals have a vested interest in the organization.

When there is a layoff, or even when a simple individual is fired, this mutual alignment is removed and all bets are off. Except for fear of legal retaliation, the individual is no longer bound to the organization. This can lead to things like:

- Executives preempting the communication of their firing and using it to swing internal opinion, or even taking key team members away with them, like Sam Altman vs OpenAI.

- Employees with access to (supposedly) restricted areas copying sensitive information: E.g, sales reps getting data from all their clients to contact them and move them along.

- Plain old espionage / sabotage. Don't forget, if a company is laying people off it means they are not doing well, and if they are not doing well means they certainly want to keep as much of what is "really happening" to themselves. Fired employees can use their internal communications to gather evidence from their boss wrongdoings, find internal memos and share with journalists willing to get a scoop, etc.

Re:Goodbye Auth0 by StreetChief on Thursday February 15, 2024 @08:18AM (#39382307)
The vast majority of employment in the US is so called "at will," which means an employee can be fired at any time for any reason, except an illegal one. And good luck with proving it was in fact an illegal one. Our "contracts" are barely worth the bits we use to store them. Why would we trust the company at all in this situation? It would be a mistake for every single person to take management at face value.
Re:Goodbye Auth0 by _heimdall on Thursday February 15, 2024 @07:51AM (#39382057)
Well I am an American that doesn't trust institutions by default, so to that end I fit your description here. I'm not sure how universal it is though, we have plenty of institutions here that people do trust and depend on every day.

In this context, I think it's less about an individual's trust of institutions and more the institutions mistrust of the individual. Companies don't have to send fired employees home immediately, they only do this because they don't trust the individual to act appropriately. There's probably a bit of a death spiral there, where both sides continue to mistrust each other further, but the individual lacking trust of institutions alone wouldn't get them locked out as soon as they're notified that they've been fired.

Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @08:20AM (#39382333)
> Companies don't have to send fired employees home immediately, they only do this because they don't trust the individual to act appropriately.

Companies don't have agency or feelings. If company leaders expect people to do their jobs properly only because they are getting paid, it's already an institutional failure, because it's not taking into account that individuals are fallible.

If the company does not have an established process to protect itself from human error, whether accidental or intentional (like an disgruntled employee going rogue), when shit hits the fan all its leaders can do is to find blame in the individual. But instead of blaming people and hoping that we can force everyone to avoid mistakes, a better alternative would be to design a system that can withstand human nature and fix the institutional process so that that error doesn't happen again. The problem is that to do this takes time and most company CEOs can not see much beyond the next fiscal year.

Re:Goodbye Auth0 by _heimdall on Thursday February 15, 2024 @09:05AM (#39382826)
I could have been more clear here. When I mentioned companies there I was referring to the people running the companies. Of course a company has no feelings or agency, companies are just a legal structure around a collection of people. Don't get me started on the absurdity of arguing that companies are people, that ruling was terrible.

I don't think its reasonable to assume that a company could ever have full safeguards in place to ensure that a bad actor employee could never cause meaningful damage, unless you are okay with a completely trustless system. Companies must trust their employees at some level, generally the level of trust grows in relation to the employee's responsibilities.

Its unreasonable to assume that any system can be 100% foolproof, if that's a requirement it just shouldn't exist. In the case of companies, they have to accept dome level of risk that employees can cause damage, whether intentional or not.

Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @09:52AM (#39383333)
> Companies must trust their employees at some level, generally the level of trust grows in relation to the employee's responsibilities.

Hard disagree. People should be trusted with the things they need to perform their role, and no more than that. You would not give access of a production database to a CTO just because they have more responsibilities than a sysadmin, and any CTO that tries to bludgeon their way into getting access to it should be considered unfit for work.

Re:Goodbye Auth0 by _heimdall on Thursday February 15, 2024 @02:30PM (#39387358)
It sounds like we actually see that the same, I'm trying to make a slightly different point.

Say I'm a software developer specifically working on the frontend library for an authentication service. The company needs to trust me with access to parts of the system and infrastructure pertinent to that feature. I very much agree that I should be locked out of other areas that I don't need for the job, for example I shouldn't have access to employee records, accounting, etc.

Once I am fired, though, the company has to continue to trust me to not misuse the parts of the system that I do already have access to. If I am fired but allowed to stay for a transition period and my permissions aren't revoked immediately, the company is trusting me. If I am fired and immediately blocked, its a sign that the company didn't trust me rather than an indication of my own mistrust for the company/institution.

Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @03:02PM (#39387877)
You could continue to work on things, but your access would be set to read-only and you'd lose commit rights, or you'd be working on a completely separate branch and as part of the transition process someone else on the team would have to be able to report they have successfully merged worked from your tree to the main one.
Re:Goodbye Auth0 by _heimdall on Thursday February 15, 2024 @10:04PM (#39392673)
Going back to my original point in this thread, aren't you describing how the post-firing lockout is based on the company's mistrust of the employee rather than the other way around, right?

My point was never that there aren't security protocols that could be used, only that its not relevant whether the employee trusts the company in that scenario.

Re:Goodbye Auth0 by rglullis on Sunday February 18, 2024 @03:04AM (#39417135)
But it's the existence and application of these security protocols that can make all the difference, and having these protocols in place shows already some type of institutional maturity.

With the proper protocols in place, a company doing layoffs signals "we trust you can still perform your role as a developer, you can still communicate/collaborate with your colleagues and you can even access the source code (because who really is going to check if you are deleting the code repo from your machine?), and the removal of write-access to the systems can be seen as a smoke test if the transition can be done orderly", while the standard current procedure just says "Through no fault of your own, you will be seen now as a potential threat so we will treat you as toxic material".

Re:Goodbye Auth0 by StreetChief on Thursday February 15, 2024 @08:28AM (#39382421)
> when shit hits the fan all its leaders can do is to find blame in the individual.

Or they could, like, take responsibility for their actions that led them to that point?

Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @08:37AM (#39382524)
They could, but do they?
Re:Goodbye Auth0 by StreetChief on Thursday February 15, 2024 @09:17AM (#39382970)
Very rarely; maybe i misunderstood your point. You're saying it's an institutional failure, but not one of the leaders? So, it's the governments fault they allowed corporate structures to function this way? Or maybe you want to blame the board of directors?
Re:Goodbye Auth0 by dariosalvi78 on Thursday February 15, 2024 @08:24AM (#39382389)
Americans don't trust _public_ institutions. They do trust and love the private ones, especially when they are humongous corporations.
Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @08:46AM (#39382601)
The ones that they get to be direct consumers and where they have some choice, sure.

But I doubt that you see people saying that they love Equifax, Healthcare Insurance companies, Comcast...

Re:Goodbye Auth0 by cmbothwell on Thursday February 15, 2024 @07:31AM (#39381896)
This is a very incisive and insightful take and really distills some large cultural differences between Americans and Europeans down to its essence.

Can I ask if you are American or European? How did you come about this insight?

Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @07:37AM (#39381948)
Born and raised in South America. Lived in the US for ~5 years (2008-2013). Living in Germany since 2013. :)
Re:Goodbye Auth0 by cmbothwell on Thursday February 15, 2024 @08:34AM (#39382490)
I would also posit that this inclination towards individuals over institutions in the US extends to Central and South America.
Re:Goodbye Auth0 by herval on Thursday February 15, 2024 @08:55AM (#39382709)
definitely not Brazil, at least
Re:Goodbye Auth0 by atemerev on Thursday February 15, 2024 @07:46AM (#39382024)
Well, there are not many countries where people actually trust institutions (and, above all, the government). Perhaps Germany, Nordic countries, Netherlands, Japan, maybe a few more.

In Switzerland, we work with the government, and are generally OK with it, but proceed cautiously, as if it could explode any second. In Spain and France already, government is considered an inefficient nuisance. In many places in South America, the government is an adversary. In Russia, government is your arch-enemy, and you do everything possible to either hide from it, perhaps in another country, or actually damage it (unless you are evil and work for them).

So "trusting institutions" is a foreign, alien concept for most of the world.

Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @07:59AM (#39382129)
Ok, but there are two institutions here: corporations and governments. Who do you think that Southern Europeans relatively trust more of those?
Re:Goodbye Auth0 by mytailorisrich on Thursday February 15, 2024 @08:13AM (#39382260)
Neither. Europeans tends to be cynical and more in the South than in the North.
Re:Goodbye Auth0 by atemerev on Thursday February 15, 2024 @04:25PM (#39389145)
I don’t think that many people trust _corporations_ anywhere. In the US, people at least can have some stake there, by owning stocks etc, which makes them more engaged. Stock markets in Europe are laughable, people rarely invest there, except through their bank funds.
Re:Goodbye Auth0 by cjbgkagh on Thursday February 15, 2024 @10:22AM (#39383738)
Americans tend to be more extreme and very individualist. Very distrustful of organizations and institutions. Many of the early European settlers were escaping religious/state persecution as well as the powerful trade guilds that dominated life in Europe at the time. I think a lot of this comes from the German immigration to the US, Germans to me seem a lot more tribal than the English. Maybe due to Germany operating as a collection of tribes and UK as an expansionist empire. Could be beer hall culture vs pub culture. When visiting Germany it was notable how small groups of people who didn’t know each other barely interacted.

If I needed help burying a body I would only ask my American friends. Friends from most other countries wouldn’t help and just encourage me to turn myself in. Not that I’ve needed this help but if I needed to do something where it was us against the world I would pick Americans to join me. I found it more difficult to make friends with Americans, they tend to maintain far fewer friendships, but the few they do maintain are held more strongly.

Re:Goodbye Auth0 by tgv on Thursday February 15, 2024 @05:49AM (#39381197)
I had that experience with a US mother company of a European subsidiary (of a subsidiary). CEO swings by, as he does once per year, and fires the whole dev team, including the local branch manager, because they'll take over in the US (they couldn't, and then bought a competitor instead; the original product is still running, 15 years later), and we were told to leave the building. I had a program building something for an unusual client project, but I had to close the laptop, and that was €60k down the drain, probably more if the project had been successful. Since then, I've avoid companies with US ties.
Re:Goodbye Auth0 by sksksk on Thursday February 15, 2024 @06:12AM (#39381362)
What country was this? If it was a European subsidiary, then would you have not have been subject to the employment protection of the country's laws?
Re:Goodbye Auth0 by tgv on Thursday February 15, 2024 @06:43AM (#39381553)
Sure, and they had to pay until the end of the contract plus compensation or offer other positions, but they can make you leave the building. It's theirs, after all. And foreign companies have it easier for certain claims, especially regarding finances and profitability, which is the main ground for rightful dismissal, so a lawyer told me.
Re:Goodbye Auth0 by throwaway11073 on Thursday February 15, 2024 @06:16AM (#39381384)
Sure - in most EU countries, especially to the east, they get some additional money (usually 1-6 months of wages + unused vacation days). That's about it.

I don't know why people think it's not possible to fire people in the EU, but it is and it's a normal thing. It just costs some money.

Re:Goodbye Auth0 by diggan on Thursday February 15, 2024 @06:33AM (#39381490)
> I don't know why people think it's not possible to fire people in the EU, but it is and it's a normal thing. It just costs some money.

It varies across Europe as well. Some countries, like Sweden, have more protections than others (no matter if union member or not), as an example. You cannot fire someone unless they demonstrably neglect their work duties and the firing overall needs to be objectively justified. Then the notice period depends on how long you've worked there, and more conditions I surely can't remember right now.

Compared to Spain that has "disciplinary dismissal" for example, where "insubordination" or "lack of discipline" could be enough to get you fired.

Re:Goodbye Auth0 by apelapan on Thursday February 15, 2024 @07:32AM (#39381904)
Insubordination is definitely grounds for termination in Sweden. One of the easiest and fastest ways to get your self fired.

Your boss tells you to unpack a crate, you say no, boss tells you "f*ck off and never come back". Perfectly fine legally and you don't get any severance pay either.

There is some nuanced to this, as you have the right to refuse unreasonable requests and you are allowed to have a bad day if you have a longish good record etc etc.

For a knowledge worker it is more difficult to define what a reasonable order is and what constitutes insubordination, but the basic rules are the same.

Re:Goodbye Auth0 by herio on Thursday February 15, 2024 @07:13AM (#39381757)
For Sweden in addition to what's stated above, if the reason for being fired is downsizing of lack of work, the law for employment protection (LAS) also states that the people laid off have to be in the reverse order of their hiring. To the latest to be hired is the first to let go.

Exceptions can be made if justified, not dug into the details of how that works.

Re:Goodbye Auth0 by tojaprice on Thursday February 15, 2024 @07:51AM (#39382056)
In the UK, you can be let go for essentially any reason (excluding protected statuses) for the first two years (first one year in Northern Ireland).
Re:Goodbye Auth0 by rjzzleep on Thursday February 15, 2024 @06:31AM (#39381470)
It is possible, but if someone does whatthe parent described like that in Europe, you get more than that and you could walk out of there with your laptop and nobody would be able to stop you, and if they did, you'd probably get more than 6 months of wages.

There is a process to firing. EVEN in the US there is a process of firing. The big lie is that most people are fed, is that in "right to work" states you have no legal recourse. You do, but not if you take the severance and sign your leave papers, because you panic right away. Something I didn't know either in the US.

The most important rule my (senior) friend once told me is to document everything, especially when your bosses make you do something that you feel uncomfortable with. Print emails if you have to and put them in a folder that you might never have to open if you're lucky.

Re:Goodbye Auth0 by prmoustache on Thursday February 15, 2024 @07:48AM (#39382036)
The fact there is a process doesn't mean you get guaranteed access to building and infrastructures.

You are technically still employed and paid but the company can refuse to let you step inside or connect to the network. You also can't work for another company without their agreement until the grace period is over.

Re:Goodbye Auth0 by gcbirzan on Thursday February 15, 2024 @07:36AM (#39381942)
At will, right to work is union related.
Re:Goodbye Auth0 by ponector on Thursday February 15, 2024 @07:27AM (#39381863)
In many countries in Europe it is hard to fire individual worker who has permanent contract.

However, another story is when mass layoff is going on. For example in Poland group of 9+ workers can be fired without any real reason. Downsizing! With 3-6 month notice period, of course.

Re:Goodbye Auth0 by throwaway11073 on Monday February 19, 2024 @08:04AM (#39429311)
In these countries they usually don't hand out permanent contracts to anyone.
Re:Goodbye Auth0 by marcosdumay on Thursday February 15, 2024 @07:33AM (#39381919)
No country will protect the right of the employee to finish his work before getting out of the company.
Re:Goodbye Auth0 by tecleandor on Thursday February 15, 2024 @09:48AM (#39383291)
Depends a bit on specific laws for every country, but you usually have to go trough proper process and announcement, and follow special rules if you're firing a big quantity of employees. Musk skipped that in the massive Twitter layoffs and it bit him in the back (for example, when firing the whole Spanish staff [0]).

Simplified a lot, and in general conditions, on Spain:

  - You have to announce it at least 15 days before ( unless it's a disciplinary dismissal ) or pay for those 15 days of salary
  - Pay for any unused vacation days and pending salaries
  - An "objective reason" is needed for the firing [1]
  - If there's no proper "objective reason", you have to reinstate the worker or pay 33 days of salary per year worked by the user [2]
  - If the layoffs involve certain number or percentage of the workers, you have to go through certain legal process and get government authorization [3]
Twitter didn't go through the process in Spain, to avoid paying the stocm options that were going to vest very soon, but then the firings were declared illegal and they had to pay proper severance and for the stock options too... [4]

  0: (EN) https://www.theolivepress.es/spain-news/2022/11/10/elon-musks-email-late-on-friday-to-sack-his-spanish-workforce-declared-null-and-void-by-unions/
  1: (ES) https://www.laboralix.com/despido-objetivo/
  2: (ES) https://www.laboralix.com/despido-improcedente/
  3: (ES) https://www.laboralix.com/despido-colectivo/
  4: (ES) https://www.elconfidencial.com/tecnologia/2023-01-24/twitter-confirma-el-despido-del-80-de-su-plantilla-en-espana_3563189/
Re:Goodbye Auth0 by CogitoCogito on Thursday February 15, 2024 @06:52AM (#39381609)
I was laid off in Sweden by an American parent company and all work ended the second it happened. It was funny because they could have asked me to keep working, but I guess a paid vacation was nicer for me anyway.
Re:Goodbye Auth0 by tialaramex on Thursday February 15, 2024 @07:45AM (#39382007)
Garden Leave (sometimes "Gardening Leave") is the technical term for this. You get paid, and they might insist on you not taking up any new job until the contract term ends, but they explicitly do not want you to do any work or come to the office or anything like that.

There's a parallel and equally wasteful but popular practice of insisting on taking on CxO employees of a purchased outfit for some prolonged period, perhaps as insurance, except that you've got no useful or interesting work for them to do. Unlike Garden Leave they're not fired - one of my friends was even told they could expect a substantial pay raise, but the job is now awful so their goal will be to wait only until as many options/ bonuses/ etc. as possible have irreversibly turned into hard money and then quit ASAP.

It's like OK, I could do something actually interesting next week or, I could sit in tedious meetings with idiots for 24 months, then pay off my mortgage, and retire immediately with $$$$$. Ugh.

If you know you'll be dead in a year, obviously the former is the right choice. But you probably won't be.

Re:Goodbye Auth0 by mickeythug on Thursday February 15, 2024 @07:01AM (#39381680)
In some parts of Europe, it is very common to do “mutual termination”, since you cannot easily fire someone just on a whim. If you use the “redundancy” excuse, companies are usually prohibited from hiring again on the same position for 6 months. If you want to fire someone and not face this, there’s a very detailed process of what you have to do, before you can justify termination (documented first warning to the employee, steps they need to take to improve, second warning, proof that they didn’t so what was asked of them, etc).

Virtually no one goes through this, and they opt for mutual termination, and generally a person can negotiate a severance package for their signature (I have seen examples of people negotiating almost a year’s salary as severance), and they are out immediately.

But this is also a scare tactic and people get caught by surprise and sign anything, sometimes without any severance. During this past year, as mass layoffs were happening in waves, people got more informed about this and were smarter in negotiating their exits.

Re:Goodbye Auth0 by kypro on Thursday February 15, 2024 @06:30AM (#39381467)
This does seem to be a lot more common in the US, I actually had this happen to me while working for a US company and the author's experience was very relatable – I was immediately locked out of my accounts and couldn't even say goodbye to the people I had been working with for the last several years (I was working remotely at the time).

But I've seen it in the UK too... Specifically one corporate I worked for sent a mass email to everyone on a Thursday afternoon saying something along the lines of "please ensure you're in the office tomorrow morning". Then on the Friday morning people were called into a room one by one, told they had been made redundant and were immediately escorted off site by security. This was just a fairly regular retail business too. Nothing that you would think required such an extreme approach.

I suppose I understand it in some ways though... If you've just told someone you've lost your job you're probably not going to be very motivated to continue to work. And suppose there is some risk people might try to disrupt business activities in protest... I think it probably is better to give employees their redundancy pay and let them move on rather than waste their time for several weeks. That said, I'm not sure why the security escort was needed in this case. The layoffs came from McKinsey's infinite wisdom though, so it wouldn't surprise me if the security escort was their recommendation to reduce risk.

Re:Goodbye Auth0 by Someone on Thursday February 15, 2024 @08:15AM (#39382279)
A reason I’ve heard for not keeping those laid off around is that you want those who stay to look to the future, not to what was, and that’s what those who got fired will do, because they don’t have a future at the company.
Re:Goodbye Auth0 by mgaunard on Thursday February 15, 2024 @08:07AM (#39382207)
In Europe, for some jobs, you'll be granted garden leave, i.e. you can stay home during your notice and still be paid.

It's essentially a mechanism where they avoid having someone with a negative mentality that's not going to work hard anyway around the office.

Re:Goodbye Auth0 by ollysb on Thursday February 15, 2024 @08:29AM (#39382426)
Gardening leave is usually for positions where the employee holds competitive information on active deals etc. During the gardening leave they're under NDA which allows for their competitive information to go stale before starting at a new company.
Re:Goodbye Auth0 by mgaunard on Thursday February 15, 2024 @09:58AM (#39383400)
Non-disclosure, non-compete and notice are different things that you're mixing together.

Notice is compulsory -- you simply cannot let go of the employee immediately and must continue paying them for 3 months (or up to 4 months in some countries where every calendar month started is due).

Non-compete is opt-in by the employer, and allows them to prevent you from working for a competitor (for up to one year I believe). In exchange the employer must still pay your previous salary (some employers will ask employees without compensation, but that's not legally enforceable).

Non-disclosure means that you're not able to disclose company and trade secrets, similarly to an NDA. It is a standard term in most employment contracts and usually applies for one year, regardless of the non-compete being enforced or not.

It is fairly common to send people for garden leave during their notice, but actually extending it further by enforcing the non-compete is a costly thing and will only be done for strategic employees.

Re:Goodbye Auth0 by glitchalumni on Thursday February 15, 2024 @05:55AM (#39381239)
Not sure which part of Europe you are referencing, but from the layoffs I've seen and heard of (DACH) the procedure was always to lock the person out immediately after the layoff call/meeting. If that's good or bad is rather subjective, personally I would rather walk out the door right after.

One might have enough time to send their farewells, but that's about it - you are still getting payed until the end of the notice period of course. (let's not talk about severance packages, they are either non existent or a joke - you often also have to sign an NDA prohibiting you to talk about the package and the layoff in general).

So basically companies pull the same questionable stuff in Europe as well, it's far from the fairytale you sometimes read about. (there are always exceptions ofc)

Re:Goodbye Auth0 by rad_gruchalski on Thursday February 15, 2024 @07:01AM (#39381675)
> you often also have to sign an NDA

you don't have to, that they arm wrest you, sure, but you don't have to do anything

Re:Goodbye Auth0 by glitchalumni on Friday February 16, 2024 @06:42PM (#39404550)
Sure, you can always say no to a couple of grand. (referring to voluntary severance packages, not whatever the legal construct of your country guarantees - which btw is a laughable amount most of the time)
Re:Goodbye Auth0 by wouldbecouldbe on Thursday February 15, 2024 @06:07AM (#39381327)
Not sure, I haven't seen mass layoffs, but individual ones. Normally it's a contract ending not being renewed, or the trial period, often the employee is then still active for 1-3 months; till the contract ends.

It's rare it's immediate and if it is there needs be an agreed fee for termination.

Re:Goodbye Auth0 by e12e on Thursday February 15, 2024 @09:47AM (#39383283)
At least in Norway the guiding principle in law is that the employee can and must work out the grace period, and locking an employee out is illegal. It's possible to mutually agree to exceptions or be granted an exception - but the latter is rare.
Re:Goodbye Auth0 by sushibowl on Thursday February 15, 2024 @05:40AM (#39381119)
I think the answer is pretty simply due to the difference in laws. In the US no notice is legally required. As you noted, employees that already know their employment is shortly coming to an end generally don't perform to the same level. Therefore it is in the company's interest to give no advance notice whatsoever until employment is officially, actually terminated.

In every European country, there's a legal requirement to give notice. And therefore there is an incentive for the company to maintain amicable relations during the notice period to try and prevent trouble.

Re:Goodbye Auth0 by soco on Thursday February 15, 2024 @05:56AM (#39381245)
Well, yes, but actually no: you can easily give notice then lock them out, you just have to pay them over the entire notice period as the law says. It's not commonly done but in special cases of really bad blood, it will. The law is there to protect the employee income, not to force the employer to give them work.
Re:Goodbye Auth0 by lopis on Thursday February 15, 2024 @08:25AM (#39382398)
This has been my experience in most cases. When an employee is terminated, they are sent home and paid the rest of their time, to avoid risk of vengeful acts or whatever.
Re:Goodbye Auth0 by Scarblac on Thursday February 15, 2024 @06:16AM (#39381388)
> Therefore it is in the company's interest to give no advance notice whatsoever until employment is officially, actually terminated.

That doesn't follow at all. The notice period exists so you can transfer your knowledge and projects to colleagues who will take over your work.

If the notice period is in the company interest when people leave on their own, it's also in the company's interest when they have to leave?

Re:Goodbye Auth0 by sokoloff on Thursday February 15, 2024 @08:09AM (#39382220)
The big difference between those two cases is when it's the company's decision, they have plenty of opportunity to plan for the transition and may frequently conclude that they've done enough for the transition before the conversation with the employee.
Re:Goodbye Auth0 by sumuyuda on Thursday February 15, 2024 @06:33AM (#39381492)
The notice period also exists so you can find a new job and aren’t immediately out on the street like in the US.

It is both in the interest of the company and employee, as neither can terminate the contract immediately.

Re:Goodbye Auth0 by matsemann on Thursday February 15, 2024 @06:06AM (#39381318)
Not only do you have to give notice, but here in Norway you also have to include employee reps and follow a strict process. Part of that process is to define criteria for how to determine who should stay or go. Then after notifying the employees about the ongoing reduction, each employee should have the opportunity to discuss with their superiors how they fit the criteria or if there are other roles in the company they could fill. And then at a set time the actual layoffs will be announced.

So it's virtually unheard of to show up, hear about layoffs, and not have a job the next day. Unless it's a situation where the whole company is going bankrupt or so.

Re:Goodbye Auth0 by thunfischtoast on Thursday February 15, 2024 @05:47AM (#39381180)
What bugs me: in most companies, especially ones where people do mostly knowledge-based work like Authy does, almost everyone has some kind of unique information on them. No matter how good your project management and code base, most people carry some kind of valueable knowledge in their head that only becomes apparant as soon as they are not there anymore: something like how to log into certain systems, backup schedules, currently pressing issues etc etc. In my opinion the most important thing that needs to be done during offboarding is transfering as much of this hidden knowledge as possible into the company.

How do they proceed operating after kicking people out without prior notice? Do those projects just get stomped and started over with new people?

Re:Goodbye Auth0 by gabrielgio on Thursday February 15, 2024 @05:47AM (#39381178)
> In the US no notice is legally required.

Required or allowed? So in the US you can't give notice?

Re:Goodbye Auth0 by ricardobeat on Thursday February 15, 2024 @06:32AM (#39381479)
If you’re asking about resigning as an employee, it seems to work the same way: legally speaking, you could just stop showing up from one day to the next.

I imagine most of the time people will have the courtesy of giving 1-2 weeks notice if possible.

Re:Goodbye Auth0 by wccrawford on Thursday February 15, 2024 @07:07AM (#39381713)
It's not just courtesy. For many local companies, the business owners will know each other and will let other business owners know if someone quits without notice, and so it's harder to get hired after that if you don't give notice.

That said, sometimes the company will decide that they'd rather you just go, and they'll tell you not to bother giving notice and you can leave immediately. Someone in another comment said that was because of bad blood, but it's also because of risk and it's unlikely that a person will be very productive during a short notice period.

When there's a tricky hand-off, though, the company might ask for and incentivize a longer notice period, too... So nothing's written in stone.

Re:Goodbye Auth0 by dspillett on Thursday February 15, 2024 @06:05AM (#39381313)
I think you've read that wrong.

It is probably better phrased as “In the US, notice is not legally required”.

Re:Goodbye Auth0 by raverbashing on Thursday February 15, 2024 @06:07AM (#39381325)
The notice period is mostly monetary. 30 days notice means you should pay for that time, but having the person actually work is optional (if you're being terminated)
Re:Goodbye Auth0 by pcl on Thursday February 15, 2024 @06:57AM (#39381647)
I find the "lock out and leave immediately" thing to be pretty weird, and perhaps US-specific.

But! The Nordic approach is also bizarre! The norm is that employees keep working for 3 months after giving notice. There are, of course, plenty of exceptions. The "normal exception" is that if someone quits and the business thinks they are going to go to a competitor, they'll leave the premises within a few days, but continue as a paid employee for the remainder of the time -- known as "garden leave."

In either case, though, the employee doesn't start working at their new job for three months!! In my experience, it's super-stifling, especially for startups, since three months is an eternity for a new company. Of course, in the tech industry, nobody really does all that much work for at least the trailing two months, since who's going to get assigned to a new project just before they leave?

I guess this is perhaps sorta how things play out in areas of the US that allow noncompetes to be enforced, too.

Re:Goodbye Auth0 by iamacyborg on Thursday February 15, 2024 @07:25AM (#39381844)
> What are they afraid of that people need to be locked out? That one brings a gun to work?

So I'm a Brit who briefly worked over in Alabama for a few months and yes, that was a genuine concern with some of the folks that were let go by the company. It was well known that quite a few staff members had firearms in their vehicles.

Re:Goodbye Auth0 by ryandrake on Thursday February 15, 2024 @12:10PM (#39385224)
When I lived in Florida, we had a guy who, upon learning he was fired, loudly threatened to come back to the office with one of his AK-47s and mow everyone down. He shouted this across to everyone in the single-floor open office as he was being physically removed from the building. And we knew he had multiple guns because we did a few company outings at a shooting range.

You better believe he was locked out as soon as he could be removed from the building, and we had armed security there for some time after his termination.

Re:Goodbye Auth0 by the_mitsuhiko on Thursday February 15, 2024 @05:59AM (#39381269)
> I don’t get it why the US company layoff culture is so different from what I’m familiar with, the European one.

Personal bias? Layoffs/Firing etc. in Austria in IT look very much the same. You're locked out, your devices are taken, you are escorted out of the office. That has nothing to do with being afraid, it's just a clear cut process. Why make it ambiguous?

Re:Goodbye Auth0 by Draiken on Thursday February 15, 2024 @08:45AM (#39382600)
I agree it's a process (not very clear everywhere though), but the reasoning is 100% being afraid of what the employees can do.

If the company could keep reliably profiting off of the employee during its notice period, why wouldn't they? It's all about mitigating the risk.

Personally when I left, I've always spent weeks finishing off what I was doing, adding/updating documentation and generally passing on any knowledge that could potentially leave with me. They allow that because they're not afraid I'm gonna delete their source code, since I'm choosing to leave. If the company didn't see risk after layoffs, that's how they would react.

And let's be real here: this is mostly a threat when layoffs are not justified. So to keep it simple and streamline the process, they treat every layoff the same.

Re:Goodbye Auth0 by Foobar8568 on Thursday February 15, 2024 @07:52AM (#39382071)
I have seen a company firing one of their developer who went to Europe on a 2weeks business trip to assist a NGO to implement their tool. One day, said developer couldn't access their emails and was wondering why. At the end, it was the NGO/client who let the dev informed.
Re:Goodbye Auth0 by dkobia on Thursday February 15, 2024 @06:06AM (#39381321)
This is a typical approach for SaaS companies - especially ones that house sensitive data like Okta/Auth0. A CISO’s nightmare is someone who’s been laid off, disgruntled and still has access to the network.
Re:Goodbye Auth0 by mrweasel on Thursday February 15, 2024 @05:32AM (#39381074)
Honestly given Oktas recent security problems I don't blame them from be very pro-active in deactivating accounts, but the ways it's handled though is just inhumane. At least have the balls to call people, give them instructions and let them know that their account is being disabled during the call.

For companies like Okta, and a few other high security positions, it's not uncommon for companies in Europe to simply pay people do to nothing for their remaining time.

Re:Goodbye Auth0 by mytailorisrich on Thursday February 15, 2024 @05:42AM (#39381139)
This is not the "European culture", which I am not sure exists as one on this issue.

I have seen many times people be quickly "locked out" when being laid off. A term for this in the UK is "garden leave" because you're still paid but you're told not to work or come to the office anymore.

As the case may be this makes sense in order to avoid any issues (from bad blood in the office to actively malicious actions) and, realistically someone being laid off is not exactly going to do their best work, anyway...

Edit: Personally I think a quick cut is better as it avoids having to continue going to the office when you know it's pretty much pointless and it allows to focus on your next step. The thing is that it brings home the fact that this was all a business arrangement despite all the emotional attachment we may develop over time.

Re:Goodbye Auth0 by DrBazza on Thursday February 15, 2024 @07:07AM (#39381717)
I've seen the 'bad blood' issue happen at a place I formerly worked at, that I refer to as 'MegaBank' (which isn't short of the truth). One was developer that seemingly left on good terms, but sneakily deleted a load of prod data as he was 'clearing down his inbox', and another that smashed up an office. Which was why, after the latter, the 'reduction in force' meetings were conducted on a separate floor with security guards.
Re:Goodbye Auth0 by Hamuko on Thursday February 15, 2024 @08:05AM (#39382177)
I don't think that's what was referred to as "bad blood".
Re:Goodbye Auth0 by Keirmot on Thursday February 15, 2024 @05:49AM (#39381200)
Garden leave also happens in Portugal, but only when the relation between employer and employee deteriorated to the point of no return. As an example in the same company I had a co-worker layed off with 3 months notice, while in the previous year a different person in the same team was called to HR during the day, and let go - we all found out he was fired on the next daily stand up.
Re:Goodbye Auth0 by mytailorisrich on Thursday February 15, 2024 @05:58AM (#39381266)
Well, if you're fired it's either that your performance was inadequate or that you did something serious enough. In the latter case, in general there is no notice period and in the former, well obviously they don't want you around anymore...
Re:Goodbye Auth0 by mytailorisrich on Thursday February 15, 2024 @08:11AM (#39382242)
For those who might not know: To be fired is not the same thing as being laid off. To be fired meand being at fault.
Re:Goodbye Auth0 by asmor on Thursday February 15, 2024 @06:42AM (#39381545)
I had a job I referred my spouse to. The team she was in had some reservations, but nothing that couldn't be addressed, essentially a bit of temperament by culture shock young talented engineers tend to have on their first or second job. But the HR person assigned took the entire next year off, so she did not get any feedback except from her boss, who said everything was fine. Another feedback round got delayed for the next 3 months because someone on the team was sick, and eventually her delayed "team feedback round" appointment changed to one with HR, in which they fired her "just in case it was still a problem".

That was the only time I've seen someone completely locked out - in Germany. She couldn't even complete the normal offboarding, because her building access was revoked, and the company didn't have an alternative process, so I had to bring it in, where people would agree with me that it was a process failure, and that they were very sorry, but not sorry enough to tell it to my spouse's face.

That work relationship didn't last long after.

Re:Goodbye Auth0 by brk on Thursday February 15, 2024 @08:51AM (#39382655)
>I don’t get it why the US company layoff culture is so different from what I’m familiar with, the European one.

Not trying to single you out, but these kinds of comments always baffle me.

Around the world, we have different religions, cultures, languages, customs, currencies, holidays, skin colors, legal structures, etc. And then someone is confused why people on the other side of the world don't do things the same way.

For me, as a product of all of the things above in the US, if a company tells me they no longer need my services, then I am not going to keep working for a while. That doesn't mean I am going to be spiteful, but just that I acknowledge their decision, and so I will move on to something else. To me, continuing to work alongside (former-ish) teammates in a dead man walking situation seems strange, but I can see why it might work in Europe.

Re:Goodbye Auth0 by artyom on Thursday February 15, 2024 @09:08AM (#39382864)
Because losing your job is really a bummer everywhere, but in Europe you've got a lot of things covered by the welfare state (how well, it's a different discussion), so it's less stressful, which reduces the probability of people being really pissed.

In the US, you're probably out of healthcare in the blink of an eye, may have no severance, no coverage, no unemployment benefits, and in some cases it'd mean deportation.

So yeah, two different worlds.

Re:Goodbye Auth0 by rescbr on Thursday February 15, 2024 @09:39AM (#39383202)
> and in some cases it'd mean deportation.

I completely understand the shittiness of this issue and I'm not from a developed country, but I mean, this is the reality of a temporary work visa, no?

I might be more pessimist/realist, but until I receive a permanent residency visa, I'd treat everything as temporary, ready to move back in a couple days notice.

Re:Goodbye Auth0 by estebank on Thursday February 15, 2024 @10:07AM (#39383524)
In (some?) other countries work visas are not tied to employer but rather job category, and the length of time waiting for permanent residency is usually 2 years. In the US an H1B can be transferred once you reach the portability threshold if you can find another employer, and depending on the country of origin you can be waiting for permanent residency (green card, not citizenship) for 2 decades. An L1B is tied to an employer and you're effectively illegally in the country as soon as you're laid off. In practice the government gracefully gives you a week to completely uproot your life and get the hell out. I was lucky, I went from arriving in the country to receiving citizenship in ~10 years, but the 4 years trying to get permanent residency were the most stressful of my life, and being spared by layoffs did little to help. Even being privileged knowing you can go elsewhere, and fully open eyed about the situation, it still sucks.
Re:Goodbye Auth0 by UncleMeat on Thursday February 15, 2024 @11:06AM (#39384385)
Unfortunately, if you are a chinese or indian citizen on an h1b the wait time for a green card is outrageously long. You can't really live in a "ready to move back in a couple days notice" state for decades. People buy homes, getting married, and have kids.
Re:Goodbye Auth0 by DoughnutHole on Thursday February 15, 2024 @10:11AM (#39383578)
Well there are temporary work visas out there in various countries that are fixed-term, e.g. a visa holder is entitled to stay in the country for 2 years. If they lose their job they're still entitled to stay for the remainder of the term, and have plenty of time to find other work (which doesn't require any sponsorship). Examples of this include the J-1 visa in the US which is explicitly a 2-year inextensible cultural exchange visa that lets you work whatever job you want.

The thing that makes the H-1B and visas like it insecure is their being tied to employer sponsorship. I don't think that's inherently unfair - the whole point of the visa is to bring in skilled workers in valuable industries.

What I do think is shitty about the H-1B in particular is just how short the grace period is to find a new sponsor. 60 days is a tight schedule even for a skilled worker in a good market, and layoffs don't tend to happen in good markets. It definitely opens up visa holders to exploitation by employers, and temporary downturns can end up kicking out a lot of valuable people.

There are other countries with skilled worker visas with more generous grace periods - e.g. Ireland's Critical Skills Employment Permit allows you 6 months to find a new job if you're laid off. I don't see the problem with that if the visa holder can support themselves financially over that timeframe.

Re:Goodbye Auth0 by cptskippy on Thursday February 15, 2024 @10:02AM (#39383444)
In the US there's an H-1B Visa program that allows skilled workers to come over as a path to citizenship. However the program is fraught with all manner of requirements like company sponsorship. Changing jobs under the H-1B program results in your journey to citizenship being reset, and current bureaucracy and politics have resulted in that journey taking upwards of a decade or more.

As a result of policy, H-1B workers will take substandard pay, abuse, and burdens to maintain a job with a company willing to sponsor them until they can get their Green Card. This creates a from of indentured servitude.

The knock on affect is that it lowers wages for everyone because there's a vast pool of skilled workers willing to accept lower pay from a company willing to maintain sponsorship of them for 10+ years.

Imagine on year 9 you get laid off, now your indentured servitude got extended another 10 years if you can find a new sponsor.

Re:Goodbye Auth0 by panick21_ on Thursday February 15, 2024 @09:42AM (#39383219)
Tying healthcare to employment is a uniquely stupid idea.
Re:Goodbye Auth0 by briffle on Thursday February 15, 2024 @10:03AM (#39383464)
I'd be fine with getting money for healthcare from my employer (especially if it was in a special pre-tax account, like a 401k that I could then use to purchase healthcare), but my being tied to whatever 2-3 plan options the head of HR and company president were wined and dined for seems a little crazy to me.
Re:Goodbye Auth0 by 01HNNWZ0MV43FF on Thursday February 15, 2024 @10:32AM (#39383886)
401ks are also dumb. Just set the IRA cap higher. Why do I need a whole bureaucratic system to decide I'm worthy of 18k of tax shelter instead of 6k?

Or get rid of tax shelters. Everyone I know who's broke is too broke to be buying stocks anyway. I can afford some tax.

Re:Goodbye Auth0 by moi2388 on Thursday February 15, 2024 @11:05AM (#39384379)
Not only because sick people might be too sick to work since they’re sick
Re:Goodbye Auth0 by madsbuch on Thursday February 15, 2024 @09:49AM (#39383308)
It is the case in much of EU also: In Germany most of the healthcare is covered by the employer. In Denmark, where I reside, you get an extra coverage with most (tech-)employments that provides access you wouldn't have otherwise.
Re:Goodbye Auth0 by jwr on Thursday February 15, 2024 @09:53AM (#39383341)
Yes, the employers pay, but you do not lose your healthcare immediately after being fired. The state provides it for you as part of the social security net. I don't know specifically about Germany or Denmark, but I suppose it's the same across the EU.
Re:Goodbye Auth0 by vladvasiliu on Thursday February 15, 2024 @10:01AM (#39383439)
In France you can keep the insurance you used to have from the employer who fired you, but you'll have to pay for it out of pocket. I don't know whether you'll also keep the same price or if it'll be adjusted up (since you presumably don't benefit from whatever deal the employer managed to get).

If you don't have this insurance (mutuelle), the State does provide the social security (it's provided either way, the mutuelle is on top of this).

But this is basic social security. If you're in a car crash or something, you're mostly covered. If you need work done on your teeth, you're on your own.

When I needed to spend the night in a hospital after breaking my wrist, basic social security covered the ambulance and the actual procedure of putting my arm back together, but had I not had a mutuelle, I would've been on the hook for the hospital stay.

Re:Goodbye Auth0 by estebank on Thursday February 15, 2024 @10:15AM (#39383639)
It's the same in the UK. But the interest difference with the IS I've noticed is the effect of price anchoring: because everyone has a provider of last resort, the private providers compete on features and price. IIRC my employer payed ~100gbp for Bupa, while my current employer in the US pays ten times that for my current provider.
Re:Goodbye Auth0 by BrandoElFollito on Thursday February 15, 2024 @04:20PM (#39389048)
I stayed a few times at the hospital and the price was something like 20€/day. Quite affordable, especially that the price is decreasing when the stay is longer.

It may be a bit more (would need to dig the bill but it was of that order of magnitude) and I am writing this do that a non-EU person does not get the idea that it was 1000€ a day or something.

Re:Goodbye Auth0 by rglullis on Thursday February 15, 2024 @09:59AM (#39383407)
> covered by the employer

Only 50%, no?

Also, in Germany the cost of insurance is tied to income. So I went from the bizarre situation where I went from paying ~500€ while employed to less than 200€ now that my business is not generating substantial revenue.

Re:Goodbye Auth0 by allendoerfer on Thursday February 15, 2024 @10:22AM (#39383748)
It is the bizarre idea of socialized healthcare, were all (publicly insured) Germans share the costs and pay according to their ability to do so, while even poor people (or founders like you) can afford to have all necessary procedures done without going bankrupt.
Re:Goodbye Auth0 by rglullis on Friday February 16, 2024 @03:05AM (#39394423)
I don't mind socialized healthcare, but this is what taxes are for. Having an "insurance" system where the premium people pay is not related to actuarial risk is indeed bizarre.
Re:Goodbye Auth0 by allendoerfer on Friday February 16, 2024 @11:57AM (#39399662)
You are required to pay them, everyone gets (essentially) the same, everyone pays (essentially) the same, both of which the government controls.

We are (again essentially) talking about taxes, just calling it social insurance.

Re:Goodbye Auth0 by azinman2 on Thursday February 15, 2024 @10:26AM (#39383800)
Cobra enables continued healthcare, many states have unemployment benefits, and I believe in all cases (?) you have some number of days to get a new visa sponsor.
Re:Goodbye Auth0 by JoshGlazebrook on Thursday February 15, 2024 @11:17AM (#39384535)
The way you speak of all of these things just makes it obvious you've never been laid off and in the position to need to utilize these things. COBRA lets you keep your existing plan, but you pay for the entire premium. In most cases this is $1000-2000 per month. For someone in survival mode and needing to find where to cut costs, 2k per month could be more than their rent.

The max unemployment benefits for any state is not going to cover much of anything, you better have savings to fall back on.

And for those on H1B, there is a 60 day grace period. Maybe in 2021-2022 it was extremely easy, but today? A lot of people will be lucky to get through a full interview loop in that time.

Re:Goodbye Auth0 by azinman2 on Thursday February 15, 2024 @11:59AM (#39385102)
I haven’t been laid off, you’re right. I’m just saying the GP made lots of absolute claims that aren’t absolutely true. Of course many European countries have bigger and better safety nets than the US, but it’s not like the US has none.

Most of the world (which isn’t the U.S. or Europe) is even worse.

Re:Goodbye Auth0 by Technetium on Thursday February 15, 2024 @10:38AM (#39383980)
Looks like you never actually had to pay for COBRA out of pocket. It's not financially feasible for the large majority of people, especially those who didn't have to pay out of pocket for their coverage previously. A single person can be ~$800USD, and if you want to cover dependents in your family, at least double it.
Re:Goodbye Auth0 by duped on Thursday February 15, 2024 @10:57AM (#39384251)
My partner is losing their healthcare very soon and it's cheaper to pay out of pocket for regular doctors and prescriptions than pay for COBRA. You basically have to be in the hospital for COBRA to be worth it.
Re:Goodbye Auth0 by kstrauser on Thursday February 15, 2024 @10:46AM (#39384116)
My family coverage was $1900.
Re:Goodbye Auth0 by JoshGlazebrook on Thursday February 15, 2024 @11:14AM (#39384501)
Mine was going to be around $2200/month. Thankfully my company paid for the first 6 months following the layoff.
Re:Goodbye Auth0 by kstrauser on Thursday February 15, 2024 @01:56PM (#39386809)
Mine covered 4 months. I'm glad I was able to find another job before that ran out.
Re:Goodbye Auth0 by 01HNNWZ0MV43FF on Thursday February 15, 2024 @10:31AM (#39383864)
Paying one's own insurance when you don't know how long you'll have no income is outrageously expensive. Last time I changed jobs I just went without because the COBRA offering was so expensive.

I have no clue how unemployment works. I don't think I've ever paid into it?

Re:Goodbye Auth0 by karmajunkie on Thursday February 15, 2024 @10:38AM (#39383979)
if you’ve worked a w2 job in the US you’ve paid into it indirectly —your employer pays it on your behalf.
Re:Goodbye Auth0 by duped on Thursday February 15, 2024 @11:03AM (#39384344)
You should look up what max unemployment benefit payments are for your state, because they probably won't cover rent/mortgage if you live in any moderate CoL area.
Re:Goodbye Auth0 by cmiles74 on Thursday February 15, 2024 @10:35AM (#39383931)
You need to have some serious savings to pay out the monthly cost of COBRA. The last time I was in this position, it was ~$1,800/month to cover my family.
Re:Goodbye Auth0 by andrewaylett on Thursday February 15, 2024 @09:26AM (#39383061)
The UK has rules about such things. If your job is at risk of redundancy, there are formal processes to follow. If enough jobs are at risk of redundancy, there's a whole consultation process that needs to happen before people are actually "made redundant". People are expected to work while that takes place.

Money can smooth things over, though. The process is expensive, and has to be done properly, or the company can offer "voluntary redundancy" where they pay you to go away quietly. That happened to me. I don't know whether I was locked out or not, because I didn't try to log in again.

Re:Goodbye Auth0 by tw04 on Thursday February 15, 2024 @10:10AM (#39383567)
Who would want that? The US style is the best of both worlds IMO. By cutting you off immediately the company protects itself from rogue employees who may try to harm the company while their access is still enabled.

For the employee, being cut off means you don't actually have to do anymore work for a company that's letting you go. You're either getting severance or you aren't, and I'd much rather collect severance while not having to work. In the instance that they're letting you go without severance: yes that's horrible they just pulled the rug. But usually that's a result of poor performance and you probably should've seen it coming. And frankly that's also why we have unemployment.

Re:Goodbye Auth0 by Repulsion9513 on Thursday February 15, 2024 @12:36PM (#39385583)
It's definitely a thing in the UK as well, at the very least. https://en.wikipedia.org/wiki/Garden_leave
Re:Goodbye Auth0 by paulddraper on Thursday February 15, 2024 @05:55PM (#39390420)
> So much more humane.

I'd 100% rather get 3 weeks severance than get paid to a couple more months (or whatever).

---

Also, the whole "security escorting you out" schtick...I'm certain that happens, but I've never seen it personally.