Slack is banning people with links to Iran even if they’ve left the country

This morning, many Slack users with ties to Iran discovered their accounts had been abruptly deactivated. The bans affected users living as far as Finland, Canada and the United States, many with few remaining ties to Iran in either citizenship or physical presence.

“In order to comply with export control and economic sanctions laws…Slack prohibits unauthorized use of its products and services in certain sanctioned countries,” the notice from Slack read. “We’ve identified your team/account as originating from one of these countries and are closing the account effective immediately.” Users received no warning, and had no time to create archives or otherwise back up data.

It was an abrupt reminder of the broad reach of US tech sanctions, and a sign of how haphazard companies are when enforcing them.

So @SlackHQ decided to send me this email. No way to appeal this decision. No way to prove that I'm not living in Iran and not working with Iranians on slack. Nope. Just hello we're banning your account. pic.twitter.com/giqYQcMJYz

— Amir Omidi (@aaomidi) December 20, 2018

@SlackHQ Thank you Slack, really classy.
A heads-up would have been nice. pic.twitter.com/jlp4q6t1iL

— Ali (@elrondd_) December 20, 2018

In a statement to The Verge, Slack said it complies with all US regulations on embargoed countries, and as a result, prohibits Slack use in Cuba, Iran, North Korea, Syria and “the Crimea region of Ukraine.”

It’s unclear what triggered today’s string of deactivations, but it seems likely to trace back to usage from IP addresses in Iran. “If our systems indicate a workspace primary owner has an IP address originating from a designated embargoed country, the entire workspace will be deactivated,” a Slack representative told The Verge. “If someone thinks any actions we took were done in error, we will review further.”

Users who believe they were deactivated in error are encouraged to email the company at feedback@slack.com to initiate a review.

Many Iranian ex-pats see the company’s interpretation of sanctions as overly broad, going far beyond the actual restrictions put in place by the US government. “They are either incompetent at OFAC interpretation or racist,” said Oxford researcher Mahsa Alimardani, who specializes in communication tools in Iran.

Most technology exports to Iran are illegal under US treasury rules, particularly when those exports involve financial transactions. But since 2014, US sanctions have included a general license for personal communications tools, described in the license as “fee-based services incident to the exchange of personal communications over the Intemet, such as instant messaging, chat and email, social networking, sharing of photos and movies, web browsing, and blogging.” That clause is generally understood to include services like Slack.

“Detecting an Iranian IP address on a paid account (which is presumed to be for business) login as a violation of sanctions is a wrong interpretation of these regulations,” Alimardani says. “At best it’s over-regulation to prevent any sort of misunderstanding or possible future hassle with OFAC.”

However, the mechanics of sanctions enforcement make it simpler for companies to ban first and ask questions later. The cost of violating US sanctions can be enormous, while the cost of deactivating a defensible account is relatively small. In many cases, companies prefer to avoid the details of sanctions licensing for fear of making an expensive mistake. Google places similarly broad restrictions on the Google Cloud and App Engine, although the Google Play Store and iOS App Store are available under the personal communications license.

Notably, Slack has encountered few corresponding problems from the government in Iran. Unlike many US-based web services, Slack is not blocked by Iran’s internal web filters, and easily loads from IP addresses within the country.

The Trump administration has grown more aggressive about enforcing sanctions abroad in recent months, most notably against Huawei, which is based in China and does not consider itself subject to US sanctions. Earlier this month, Huawei CFO Meng Wanzhou was arrested in Canada on suspicion of violating US sanctions on Iran, triggering an ongoing international incident.

from The Verge - Teches https://ift.tt/2PS1nyS