Hacker News Reader

Comment by nightowl_games | Hacker News Reader

Wow. The whole point of paying someone like Auth0 is to _not_ have this happen. This is basically their whole point, is it not? Really looking forward to the post-mortem, but I won't ever forget just how down this thing is right now.

View on HN

I suppose the point is that you get one 5h outage every other year _and_ you get to blame somebody else, rather than more regular ones because it's not really your core competency

We all know that all 3rd parties will have outages at some point, nobody's pretending otherwise

Yup, exactly. We're actively working on ripping them out of our software, this is ridiculous. I knew we should have taken the time to make a fail safe...sigh...

> The whole point of paying someone like {insert cloud provider} is to _not_ have this happen.

Being in the cloud doesn't mitigate potential issues.

It just means that I can point to someone else when the site goes down and can't do anything to get it back up. Like Auth0 today, or Microsoft a couple of weeks ago.

The whole point for me is that I don't want to be responsible for user credentials. I don't trust the security of my app.

If you don't trust your app with credentials how can you trust your app with what those credentials are used to access?

If I get hacked I don't want to leak my users' passwords. The rest I couldn't care less about. It's nothing of value.

Basically every platform and framework has good salting and hashing built in. Usually it's scrypt, bcrypt or agron2.

totally

Reply on news.ycombinator.com