8 ms·
12ft.io has been banned by Vercel
- onion2k 3y agoIt's understandable to ban the site given it does break Vercel's terms, but the allegation that Vercel hasn't let the owner transfer the domain away is a serious concern. Removing a customer is always hard but you have to do it in a way that ends in a clean break between your business and the customer. Keeping a domain fails to achieve that in a big way.
- victorbjorklund 3y agoAnd they shutdown all his other projects.
- upon_drumhead 3y agoThis part doesn’t seem unreasonable to me, however the domains being held does seem unreasonable.
- onion2k 3y agoThey presumably shut down his account, and that indirectly resulted in shutting down everything. I'd put that on the customer - if you run a risky project that could get your account banned you should partition things better.
- the_mitsuhiko 3y agoI absolute believe that Vercel does not like to host it and they have the freedom to restrict the service. But I _am_ curious which term of the TOS it violated.
- cldellow 3y agoVercel's terms are at https://vercel.com/legal/terms https://vercel.com/legal/terms. A handful of possible violations from section 6, Acceptable Use: - The Services may only be used for lawful purposes. - You shall not attempt to undermine the security or integrity of computing systems or networks of Vercel, its partners, or any other person, and must not attempt to gain unauthorized access. - You may not use the services or Vercel's infrastructure for proxying, scraping, to create virtual private networks, or to create virtual private servers. Reasonable people might disagree whether 12ft.io is being unlawful, undermining the integrity of a computing system, gaining unauthorized access, or proxying/scraping. So the TOS also says: - The final decision of whether an account is in violation of any of these acceptable use terms is at the sole discretion of Vercel.
- the_mitsuhiko 3y ago> You may not use the services or Vercel's infrastructure for proxying, scraping I think that's pretty clear cut then.
- cldellow 3y agoLooking at archive.org, I think this was only added in their most recent May 1, 2023 TOS update. He might be the reason it now exists in the TOS. :)
- randombits0 3y agoSince the service alters the data before delivery, a strong argument can be made that it’s not a proxy per se. Say I did something similar with the goal of assisting vision-impaired users. That’s not just a proxy. It’s the weekend. He’ll talk to them on Monday.
- xp84 3y ago> a strong argument can be made that it’s not a proxy per se. I suppose, although lots of proxies make changes. Either way, he should probably change the URL that it uses if he intends to argue it's not a proxy of any kind. ;) I still have a tab open with an article, and the URL is: https://12ft.io/proxy?q=https%3A%2F%2Fwww...
- echelon 3y ago> - The final decision of whether an account is in violation of any of these acceptable use terms is at the sole discretion of Vercel. Seems like it's not safe to host on Vercel, then. They're giving themselves absolute control with zero recourse. Looks like you're opted into arbitration too. Classic hostile, anti-consumer behavior. Don't they know who they exist to serve?
- pluto_modadic 3y agoso they seized the domain kinda like you do with malware? it's unfortunate that the only button for Vercel admins is "seize everything in this account", as that's a bit imprecise if one domain is hacked but if it's a person willfully violating TOS, then it's not really a hacked box, it's an intentionally created thing - and maybe that means that person shouldn't be a customer of Vercel anymore.
- benatkin 3y agoI'd be OK with them taking up to 30 days to do this, but I too expect that they let the owner transfer their domain away. I am not currently concerned, because I think they will let the owner transfer it away probably in less than a week if the owner has a constructive dialogue with them.
- apitman 3y agoThis is why you shouldn't combine your registrar with whatever services you have your domains pointed at. Domains should be delegated to services using a simple OAuth2 protocol. DomainConnect is technically close but very corporate and not good for self-hosted services.
- xp84 3y ago> Domains should be delegated to services using a simple OAuth2 protocol Maybe i'm missing something, but why not do this using simple DNS? Nameservers at the registrar, or nameservers at some simple dns-only thing, and point hostnames to whatever you want at the moment.
- apitman 3y agoThe barrier to entry to using a domain name is way too high. Even just to use a domain with email you have to manually enter a bunch of DNS records. That should be a quick OAuth2 flow from your email provider that gives them a token they can use to set the records for you.
- jonny_eh 3y agoWhat was the site? What’s the context?
- deleted 3y ago[deleted]
- chomp 3y ago12ft.io is a paywall buster. Not sure on the context other than it might be against their ToS?
- ssnistfajen 3y ago12ft hasn't worked against many prominent U.S.-based site paywalls for a while now even though other paywall-bypassing methods still work on those sites. So I had presumed the author had already been catering to some of these angry letters sent to him. Author did mention he had received at least 4 E-mails regarding such matters from Vercel in the past year. Vercel probably resorted to the nuclear option to finally get his focused attention.
- Mandatum 3y agoSounds like it’s resolved. Author just got angry after getting back from holiday, and seeing their access to every site they own is cut. Which is reasonable given it seems Vercel doesn’t have site level granularity of restricting access. Which is worrisome. What other level of granularity are they missing? Do I need to worry about security and access controls?
- jauntywundrkind 3y agoCan you link to any resolution? All I can see on X/Twitter is the one submitted post.
- Kwpolska 3y agoIt's probably not a technical issue with granularity. Vercel probably decided they don't want to do business with someone who broke their ToS and nuked the entire account.
- ajkjk 3y agoThe top reply is from Vercel: > Hey Thomas. Your paywall-bypassing site broke our ToS and created hundreds of hours of support time spent on all the outreach from the impacted businesses. > Our support team reached out to you on Oct 14th to let you know this was unsustainable and to try to work with you. The poster immediately misunderstood them and thought the hundreds of hours were for talking to him. But they also sounded reasonable afterwards. > I’ve received 4 emails from vercel support in 2023, I don’t think that constitutes hundreds of hours of work > But tbf I get it if you want to be an opinionated hosting provider and not host 12ft. No worries here, just restore my other projects and give me my domains back and we chill
- echelon 3y agoA couple of platform providers have burned me so bad that I will absolutely move my business and tell others about my bad experiences. In 2008, GoDaddy let an associate transfer StrategyWiki.org and a bunch of other domains out of my account while I was on a college trip with no internet. I'd spent half a decade building up these projects, and they were stolen away without my knowledge. GoDaddy offered no recourse or apology. The guy that performed the heist was 15 years my senior and from a family of lawyers, which he absolutely threatened me with if I tried to fight him. Even though GoDaddy ownership has changed, I do not like them to this day. Over the past few years, I maintained a personal Netlify account for hosting a bunch of personal websites. When I started building my startup on Netlify, they moved my personal websites out of their free tier (despite them being in a different account) and into a paid plan. They started charging my card (which I wasn't aware of), and when I changed my billing info they deleted my websites entirely. There was no option to restore them, and their support was incredibly rude. They kept telling me what I had to do to undo their mistake without offering to do it themselves. Netlify is horrible. Rude and unhelpful. I was just about to move over to Vercel, but if they're no better than Netlify, I may as well stay put.
- unraveller 3y agoIf Vercel is working for the "impacted businesses" so much then why aren't they charging them for the hours worked entrenching their market position and busting their business model critics? Why send the bill for that time to him if it's not in ultimate service of him? He rightly sees through their incorrect billing stance. Seems like Vercel takes sides in every industry so you better hope your business has no impact on any other if you go with them. We need little guys out there correcting the record of these "elusive content" publishers trying to claim exclusive access is all they offer when moments before it was available for free to anyone listening. He just proves they value bot access more than human audience. Maybe he does to, maybe he only wants bots to access his website. Vercel says no, only big business can get away with that freedom to choose one's audience makeup.
- ForkMeOnTinder 3y ago> Worst yet, they took down all my projects and confiscated all my domains Never put all your eggs in one basket. Keep your domains at one company. Your DNS with another. Hosting, a third. If you have activist-type projects that might attract the attention of powerful people or companies, keep those segregated from your more banal projects in their own isolated accounts. It sucks seeing people learn this the hard way.
- amadeuspagel 3y ago> Keep your domains at one company. Your DNS with another. Hosting, a third. This just means that there are three companies that can shut you down.
- asadm 3y agoBut not completely, at the same time
- amadeuspagel 3y agoYes, completely. If you lack any of these things you are shut down completely
- bezhermoso 3y agoThis saga clearly is a counterpoint.
- kadoban 3y agoIt's typically a lot easier to recover from the loss of one of those than all of them at once.
- SahAssar 3y agoDomains and hosting are usually seen very differently. Your domain is a lot closer to property, while the hosting is commonly shut down anytime it is seen as inconvenient by the provider. If you combine them on the same provider you risk loosing access to the former because you lost the latter, the providers that host all the services also tend to have blurred lines between disabling one service and disabling your whole account.
- benatkin 3y ago[flagged]
- deleted 3y ago[deleted]
- dang 3y ago> I think HN should [...] stop hyperbolic ones from hitting the front page How could we do that?
- benatkin 3y agoThe best thing I can think of is flagging, which would just mean that if you agree with me, when other posts like this come up, leaving a comment suggesting that it goes against HN's guidelines, which it does IMO by not being interesting. This might result in it still hitting the front page but spending less time there, which would probably be better than going outside of how HN currently works, since HN already strikes a good balance with its curation.
- aaomidi 3y agoThis post is highly relevant. It's telling users to stay away from Vercel. I disagree with flagging these posts.
- notfried 3y agoTangential, but I quite like the error page. Informative, concise and avoids any confusion as to what is going on. > This Deployment has been disabled. > Your connection is working correctly. > Vercel is working correctly. > If you are a visitor, contact the website owner or try again later. > If you are the owner, please contact support.
- benatkin 3y agoI prefer Heroku's, at least for its own subdomains: https://muchwow.herokuapp.com/ https://muchwow.herokuapp.com/ Compare to: https://muchwow.vercel.app/ https://muchwow.vercel.app/ That information isn't actually useful, especially the ID Of course there are others, it would make for a good blog post. Maybe throw ChatGPT with plugins and https://publicsuffix.org/ https://publicsuffix.org/ on it.
- 1vuio0pswjnm7 3y agoDEPLOYMENT_DISABLED Saw this in the HTTP response yesterday. 12ft.io had not been working correctly for months anyway, e.g., for ft.com. Now I just use on.ft.com URLs and find FT articles syndicated on other sites. Works fine.
- Mandatum 3y agoI wonder if this is the first time the author has heard from Vercel. I suspect Vercel never wanted to host this persons content given the amount of legal requests they likely had to deal with. It probably would have been better business from Vercel to reach out and say, “Hey, it costs us too much money in legal fees dealing with your content. We’re not Amazon. Can you move somewhere else?” Asking the question and not waiting until it’s too late to deal with it would have been the way to go. Vercel has known about this site for a long time. Seems a weird way to deal with it, and tells me that their CS team don’t do much proactive support.
- hipadev23 3y agoWhen are people gonna learn you need to keep domain ownership, DNS, and where you host your website fully separate.
- silenced_trope 3y agoI'm not sure if anyone actually does this despite your claim. Most people who go AWS for hosting, also use their domain/DNS services. Likewise for the others.
- thefascistleft 3y ago[dead]
- bdcravens 3y ago> But tbf I get it if you want to be an opinionated hosting provider and not host 12ft. No worries here, just restore my other projects and give me my domains back and we chill Why would you want to continue to do business with them? Unless of course you built your site in such a way that they are your only (practical) hosting option, which seems like a bad approach no matter apps you're building.
- stuckkeys 3y agoI was wondering where I had heard of that domain name. Then it finally clicked. First time I am hearing about vercel. What would constitute as breach of TOS? Is it because he is providing it as a service (free/paid not sure exactly)? I also thought it was based on cached content!? Also, did he not have any backups elsewhere? I could never solely rely on the cloud services. They can change their TOS anytime and screw you over.
- silenced_trope 3y ago12ft.io never worked well for me. But archive.is generally always works.
- PawgerZ 3y ago12ft.io accepts money from websites that want to be blacklisted from their service. Archive.is goes in captcha loops everytime I try to open it. I've resorted to just using reader mode and bookmarklets that others have made.
- NorthProle 3y agoI'm getting the same Captcha loops with Archive, although I had originally blamed my out-of-date browser. What alternative sites are there?
- PawgerZ 3y agoI actually figured out my problem after replying to your original comment. There's some issue with DNS over HTTPS, so you have to whitelist their sites in your settings, or turn off DNS over HTTPS (which I don't recommend). To whitelist, on Firefox: Hamburger menu > settings > privacy and security > DNS over HTTPS > Manage exceptions > Add "archive.is", "archive.ph", and "archive.today" If you don't want to do that, or it doesn't work, use Firefox's reader mode or the google cache bookmarklet I added below. Google Cache Bookmarklet: javascript:void(open("https://webcache.googleusercontent.com/search?q=cache https://webcache.googleusercontent.com/search?q=cache:" + document.location))
- jitl 3y agoOf course an account running a site based on violating copyright is eventually going to be suspended. Any service provider in US jurisdiction will do the same. It's not a matter of opinion or policy for Vercel, or unusual terms of service. It’s critical for Vercel’s business continuity. Services are protected from copyright claims under the DMCA “safe harbor” laws as long as they pass along copyright notices to their users, and take down content if the user is unresponsive. Otherwise Vercel would become liable for the copyright violation in addition to the user. If Vercel doesn’t honor the DMCA safe harbor requirements, then Vercel’s providers will shut down Vercel itself. AWS could suspend Vercel’s use of Lambda/EC2, Vercel’s DNS provider could stop answering DNS queries for hosted domains, etc. I’ve worked twice at service providers protected by DMCA safe harbor (first at UC Berkeley’s ISP, now at Notion) and can tell you that for service providers the consequences of losing DMCA safe harbor are just as severe than the consequences for the user. Early in my days at Notion, we missed a DMCA takedown notice for a public page, the copyright holder escalated to Amazon, and Amazon threatened to terminate the EC2 instances running our service. https://www.copyright.gov/512/#:~:text=Overview%20of%20Section%20512&text=The%20safe%20harbors%20shield%20qualifying,content%20and%20meeting%20certain%20conditions https://www.copyright.gov/512/#:~:text=Overview%20of%20Secti...
- aaomidi 3y agoOnce a company does this, that company is basically fully done in my mind. The damage is done to their brand and is irreversible.
- Jorle 3y agohttps://es.scribd.com/document/521269262/convenios-internacionales https://es.scribd.com/document/521269262/convenios-internaci...
- fosilsandwich 3y ago[flagged]
- m-p-3 3y agoUsing a more lenient host, and publishing the un-paywalled content on IPFS could be a more sustainable option that would also be harder to take down.
- KoftaBob 3y agoFor an iOS/Mac alternative: I made a shortcut called Trebuchet that pulls up the archived version of articles and opens up in reader mode. https://www.icloud.com/shortcuts/0df29c2c9aba44d48de1025fc8efbc90 https://www.icloud.com/shortcuts/0df29c2c9aba44d48de1025fc8e...
- makingmark 3y agoUsed to worked well, stopped recently for me. "Too many requests".
- raxi 3y agoIt is online at 1ft.io I read that from recent magnolia commits, it falls back to {12,1}ft for some websites (apparently, some techniques cannot be done on client-side, perhaps, they require proxies in particular countries or google network to impersonate googlebot better)
- pinkman6 3y agohttps://www.clubensayos.com/Informes-de-Libros/Res%C3%BAmen-del-libro-S%C3%A1lvese-quien-pueda-Andr%C3%A9s/5717127.html https://www.clubensayos.com/Informes-de-Libros/Res%C3%BAmen-...
- schmijos 3y ago> confiscated all my domains Please always separate registrar from DNS provider! The reason is this: * Registrars are your legal contract partner regarding the domain name. * DNS providers are you technical partner for making something available under the domain name.