5 ms·

Oh man, my heart breaks when I see yet another auth framework _yet again_ on HN front page, because I work for a company selling Identity Access Management solu

Oh man, my heart breaks when I see yet another auth framework _yet again_ on HN front page, because I work for a company selling Identity Access Management solutions, so I'm not allowed to work on my dream authentication framework [1] for obvious legal reasons. I know a lot of problems regarding authentication and SSO, and I have such a simple solution in my head for a lot of use cases which would be useful for a lot of companies. It is especially annoying because I see how companies pay millions of dollars for fucking terrible solutions I don't think it's fair. The only way I could start working on this if I quit my job, but that might not be very ethical thing to do. Any advice what should I do? What would you do? [1]: https://github.com/kissgyorgy/fancy-auth https://github.com/kissgyorgy/fancy-auth

notyourwork 8y ago
> The only way I could start working on this if I quit my job, but that might not be very ethical thing to do. Any advice what should I do? What would you do? Why is this not ethical? A lot of people I know who started their own company usually spun the idea off of experience from their prior employer. If its not ethical why not build it in your current company?
- Walkman 8y ago
  > Why is this not ethical? Everything I learned about authentication, I learned at this company by digging the code base and understanding our customer's problems. I don't think this is the same like "I worked a lot with XY web framework so I start a startup with XY." I actually learned the domain of authentication only on company time. > If its not ethical why not build it in your current company? That's a good question I'm not allowed to answer here :D
  - barkingcat 8y ago
    If that is not ethical then the entire Western business world will collapse. This is what "work" accomplishes. You go to work, exchange your time for services done for the company. In exchange, the company gives you money, and yes - extreme amounts of domain knowledge, to the extent that you might be the only person on the planet who knows X topic. Then you take it to the next workplace, to spread it and to innovate. If your current company doesn't like it, they can 1) increase the pay - like pay you so much money that you're willing to stay. or 2) sue you and crush you so that even if you go elsewhere lawyers will be on you everywhere you go. This is how every single person alive on the planet does it. Without knowledge transfer and this type of behaviour, we would never progress beyond the industrial age.
  - shay_ker 8y ago
    > I actually learned the domain of authentication only on company time True, but that same type of argument can be made for any of us. It's important not to take that argument too far, though. Remember that your company benefits from you learning & growing as well. To be honest, I think the same way as you do. I feel really bad being a dick to an employer because I feel like I owe them something (although many HN'ers would argue we owe our employers nothing). For me, it's helpful to make my guilt concrete - do I feel like I owe something to the company, or to specific people who mentored me? Usually it's the latter. And usually - hopefully - if they're good people, they'd be understanding if I made a decision that's best for me. The advice I'd give to you is do what's best for you, which in this case seems like quitting and working on what you care about. But also show appreciation for the people that helped you along the way and don't burn bridges. A heartfelt thank you note/email (specific & different for each person) goes a long, long way. People remember these things and will think of you in the future. And if they don't care or remember? Then you made the right choice to leave.
  - aylmao 8y ago
    > I learned at this company by digging the code base and understanding our customer's problems. Under this logic your'e stuck with your current employer forever. Resumes and interviews are all about what you learned at your previous jobs, so if you don't want to make use of that anywhere else, then you might as well shred your resume and forget about ever getting hired ¯\_(ツ)_/¯. I bet your company goes around hiring experienced people and in fact I would bet that codebase was written by someone who had worked in authentication before, probably somewhere else. So unless it's not illegal (like company secrets) nothing to worry about.
barkingcat 8y ago
Why is this not ethical? Once you quit your job you are free to work on any project unless you have signed some sort of non-compete and even then, it's probably the non-compete that's non-ethical and illegal.
- FPGAhacker 8y ago
  Depending on the size of the company you worked for, and their legal budget, they may decide to go after you for things you produce even without a non-compete. Or rather they go after ownership of what you produce, claiming it is based on knowledge you gained while performing your job duties for them. It is far from guaranteed to happen, but it's a risk with a chilling effect.
  - jonathankoren 8y ago
    Noncompetes are rarely enforced. Move to California if you’re really scared.
    - lazyasciiart 8y ago
      Will that protect you from a suit filed in the place of your last employment?
      - elithrar 8y ago
        No, because you signed the contract in another state. They can still sue you there in the majority of cases.
        jonathankoren 8y ago
        Interstate noncompetes are unenforceable in California. See Application Group, Inc. v. Hunter Group, Inc (1988). Also, one could argue that enforcing a noncompete nationally, would be regulating interstate commerce, and thus the pervue of the federal government. There is no federal noncompete law. https://en.wikipedia.org/wiki/Non-compete_clause https://en.wikipedia.org/wiki/Non-compete_clause
theoh 8y ago
You have no moral duty to continue acting in the interest of your current employer. This wiki page discusses some of the issues around these situations. https://en.wikipedia.org/wiki/Non-compete_clause https://en.wikipedia.org/wiki/Non-compete_clause
ravenstine 8y ago
> The only way I could start working on this if I quit my job, but that might not be very ethical thing to do. Any advice what should I do? What would you do? If you do this, make sure you have enough funds to support yourself for a while, and try to find someone who you can team up with. Those are the two tips I have from having quit my job recently to work on a passion project. Actually, if you come up with a figure for how much you should have in savings, I'd say aim for double that figure. Every project is more difficult than we anticipate.
devwastaken 8y ago
If your idea is good then presenting that idea doesn't seem to be a problem. The issue is when you want to horde it to make a business out of it yourself.

notyourwork 8y ago

> The only way I could start working on this if I quit my job, but that might not be very ethical thing to do. Any advice what should I do? What would you do? Why is this not ethical? A lot of people I know who started their own company usually spun the idea off of experience from their prior employer. If its not ethical why not build it in your current company?

Walkman 8y ago
> Why is this not ethical? Everything I learned about authentication, I learned at this company by digging the code base and understanding our customer's problems. I don't think this is the same like "I worked a lot with XY web framework so I start a startup with XY." I actually learned the domain of authentication only on company time. > If its not ethical why not build it in your current company? That's a good question I'm not allowed to answer here :D
- barkingcat 8y ago
  If that is not ethical then the entire Western business world will collapse. This is what "work" accomplishes. You go to work, exchange your time for services done for the company. In exchange, the company gives you money, and yes - extreme amounts of domain knowledge, to the extent that you might be the only person on the planet who knows X topic. Then you take it to the next workplace, to spread it and to innovate. If your current company doesn't like it, they can 1) increase the pay - like pay you so much money that you're willing to stay. or 2) sue you and crush you so that even if you go elsewhere lawyers will be on you everywhere you go. This is how every single person alive on the planet does it. Without knowledge transfer and this type of behaviour, we would never progress beyond the industrial age.
- shay_ker 8y ago
  > I actually learned the domain of authentication only on company time True, but that same type of argument can be made for any of us. It's important not to take that argument too far, though. Remember that your company benefits from you learning & growing as well. To be honest, I think the same way as you do. I feel really bad being a dick to an employer because I feel like I owe them something (although many HN'ers would argue we owe our employers nothing). For me, it's helpful to make my guilt concrete - do I feel like I owe something to the company, or to specific people who mentored me? Usually it's the latter. And usually - hopefully - if they're good people, they'd be understanding if I made a decision that's best for me. The advice I'd give to you is do what's best for you, which in this case seems like quitting and working on what you care about. But also show appreciation for the people that helped you along the way and don't burn bridges. A heartfelt thank you note/email (specific & different for each person) goes a long, long way. People remember these things and will think of you in the future. And if they don't care or remember? Then you made the right choice to leave.
- aylmao 8y ago
  > I learned at this company by digging the code base and understanding our customer's problems. Under this logic your'e stuck with your current employer forever. Resumes and interviews are all about what you learned at your previous jobs, so if you don't want to make use of that anywhere else, then you might as well shred your resume and forget about ever getting hired ¯\_(ツ)_/¯. I bet your company goes around hiring experienced people and in fact I would bet that codebase was written by someone who had worked in authentication before, probably somewhere else. So unless it's not illegal (like company secrets) nothing to worry about.

barkingcat 8y ago

Why is this not ethical? Once you quit your job you are free to work on any project unless you have signed some sort of non-compete and even then, it's probably the non-compete that's non-ethical and illegal.

FPGAhacker 8y ago
Depending on the size of the company you worked for, and their legal budget, they may decide to go after you for things you produce even without a non-compete. Or rather they go after ownership of what you produce, claiming it is based on knowledge you gained while performing your job duties for them. It is far from guaranteed to happen, but it's a risk with a chilling effect.
- jonathankoren 8y ago
  Noncompetes are rarely enforced. Move to California if you’re really scared.
  - lazyasciiart 8y ago
    Will that protect you from a suit filed in the place of your last employment?
    - elithrar 8y ago
      No, because you signed the contract in another state. They can still sue you there in the majority of cases.
      - jonathankoren 8y ago
        Interstate noncompetes are unenforceable in California. See Application Group, Inc. v. Hunter Group, Inc (1988). Also, one could argue that enforcing a noncompete nationally, would be regulating interstate commerce, and thus the pervue of the federal government. There is no federal noncompete law. https://en.wikipedia.org/wiki/Non-compete_clause https://en.wikipedia.org/wiki/Non-compete_clause

theoh 8y ago

You have no moral duty to continue acting in the interest of your current employer. This wiki page discusses some of the issues around these situations. https://en.wikipedia.org/wiki/Non-compete_clause https://en.wikipedia.org/wiki/Non-compete_clause

ravenstine 8y ago

> The only way I could start working on this if I quit my job, but that might not be very ethical thing to do. Any advice what should I do? What would you do? If you do this, make sure you have enough funds to support yourself for a while, and try to find someone who you can team up with. Those are the two tips I have from having quit my job recently to work on a passion project. Actually, if you come up with a figure for how much you should have in savings, I'd say aim for double that figure. Every project is more difficult than we anticipate.

devwastaken 8y ago

If your idea is good then presenting that idea doesn't seem to be a problem. The issue is when you want to horde it to make a business out of it yourself.