Skip to main content

Slack is banning people with links to Iran even if they’ve left the country

This morning, many Slack users with ties to Iran discovered their accounts had been abruptly deactivated. The bans affected users living as far as Finland, Canada and the United States, many with few remaining ties to Iran in either citizenship or physical presence.

“In order to comply with export control and economic sanctions laws…Slack prohibits unauthorized use of its products and services in certain sanctioned countries,” the notice from Slack read. “We’ve identified your team/account as originating from one of these countries and are closing the account effective immediately.” Users received no warning, and had no time to create archives or otherwise back up data.

It was an abrupt reminder of the broad reach of US tech sanctions, and a sign of how haphazard companies are when enforcing them.

In a statement to The Verge, Slack said it complies with all US regulations on embargoed countries, and as a result, prohibits Slack use in Cuba, Iran, North Korea, Syria and “the Crimea region of Ukraine.”

It’s unclear what triggered today’s string of deactivations, but it seems likely to trace back to usage from IP addresses in Iran. “If our systems indicate a workspace primary owner has an IP address originating from a designated embargoed country, the entire workspace will be deactivated,” a Slack representative told The Verge. “If someone thinks any actions we took were done in error, we will review further.”

Users who believe they were deactivated in error are encouraged to email the company at feedback@slack.com to initiate a review.

Many Iranian ex-pats see the company’s interpretation of sanctions as overly broad, going far beyond the actual restrictions put in place by the US government. “They are either incompetent at OFAC interpretation or racist,” said Oxford researcher Mahsa Alimardani, who specializes in communication tools in Iran.

Most technology exports to Iran are illegal under US treasury rules, particularly when those exports involve financial transactions. But since 2014, US sanctions have included a general license for personal communications tools, described in the license as “fee-based services incident to the exchange of personal communications over the Intemet, such as instant messaging, chat and email, social networking, sharing of photos and movies, web browsing, and blogging.” That clause is generally understood to include services like Slack.

“Detecting an Iranian IP address on a paid account (which is presumed to be for business) login as a violation of sanctions is a wrong interpretation of these regulations,” Alimardani says. “At best it’s over-regulation to prevent any sort of misunderstanding or possible future hassle with OFAC.”

However, the mechanics of sanctions enforcement make it simpler for companies to ban first and ask questions later. The cost of violating US sanctions can be enormous, while the cost of deactivating a defensible account is relatively small. In many cases, companies prefer to avoid the details of sanctions licensing for fear of making an expensive mistake. Google places similarly broad restrictions on the Google Cloud and App Engine, although the Google Play Store and iOS App Store are available under the personal communications license.

Notably, Slack has encountered few corresponding problems from the government in Iran. Unlike many US-based web services, Slack is not blocked by Iran’s internal web filters, and easily loads from IP addresses within the country.

The Trump administration has grown more aggressive about enforcing sanctions abroad in recent months, most notably against Huawei, which is based in China and does not consider itself subject to US sanctions. Earlier this month, Huawei CFO Meng Wanzhou was arrested in Canada on suspicion of violating US sanctions on Iran, triggering an ongoing international incident.



from The Verge - Teches https://ift.tt/2PS1nyS

Comments

Popular posts from this blog

Magic Leap is shipping across (most of) the US

As Magic Leap holds the first developer conference for its Magic Leap One mixed reality headset, that headset has started shipping across the contiguous United States, instead of in a set of select markets. The Magic Leap One Creator Edition costs $2,295, just like before, but there’s now an installment plan that starts at $96 per month. All orders are supposed to arrive within 60 days. The Magic Leap One Creator Edition went on sale in early August, and while Magic Leap has touted it as a fully functional device, it’s basically meant for people who want to design apps, games, or art for mixed reality. We were ambivalent toward the hardware, which we found limited, and we noted that Magic Leap hadn’t shown off a lot of material that showcased its potential. The company’s developer conference keynote has revealed several new projects. Among other things, Spider-Man studio Insomniac Games is building an experience that will let you grow a holographic creature on your tabletop, and...

The company behind the adorably doomed robot Kuri is shutting down

Less than a month after Mayfield Robotics said it was stopping production on its Kuri home robot, the company announced today on its blog that the company will be shutting down. Mayfield Robotics launched in 2015 as part of Bosch’s Startup Platform, but struggled to integrate with and find a business fit within Bosch. Since the cancellation of its Kuri robot, Mayfield Robotics had been looking for external partners for long-term technology development, but was unable to find investment to support its future. The company will cease all operations by October 31st. We first met Kuri at CES 2017, and it wasn’t yet able to showcase all the features it was promised to have in the future. The robot was supposed to have smart assistant functionalities like an Amazon Echo, but with a much cuter face and movable body. Promo videos showed it working as a moving home security camera that was controllable through the Kuri app, but in the demonstration we saw, it only had as much functionality a...

Amazon’s plans for a New York office are under new scrutiny

A month ago, when Amazon announced that it would build regional offices in New York and Virginia at great expense to the taxpayers there, I wrote that it had misunderstood the moment : Perhaps the furor over Amazon’s regional offices will blow over. But it’s hard not to feel today as if the company misread the room — overestimating the public’s appetite for a billion-dollar giveaway to one of the world’s biggest companies, and underestimating the public’s ability to raise hell on- and offline. Amazon may yet feel that pain, in the long run. Today, Amazon met the room: 150 protesters who showed up to the first New York City Council hearing about the plan. According to reports from the scene, demonstrators’ concerns start with the $3 billion in incentives that New York plans to give Amazon in exchange for locating there — and, it says, creating 25,000 jobs. Here’s Leticia Miranda in BuzzFeed : ”You’re worth a trillion dollars,” New York City Council Speaker Corey Johnson told the ...