top | item 38061779

12ft.io has been banned by Vercel

136 points| bytebln | 2 years ago |twitter.com

63 comments

order

onion2k|2 years ago

It's understandable to ban the site given it does break Vercel's terms, but the allegation that Vercel hasn't let the owner transfer the domain away is a serious concern. Removing a customer is always hard but you have to do it in a way that ends in a clean break between your business and the customer. Keeping a domain fails to achieve that in a big way.

apitman|2 years ago

This is why you shouldn't combine your registrar with whatever services you have your domains pointed at. Domains should be delegated to services using a simple OAuth2 protocol. DomainConnect is technically close but very corporate and not good for self-hosted services.

victorbjorklund|2 years ago

And they shutdown all his other projects.

the_mitsuhiko|2 years ago

I absolute believe that Vercel does not like to host it and they have the freedom to restrict the service. But I _am_ curious which term of the TOS it violated.

benatkin|2 years ago

I'd be OK with them taking up to 30 days to do this, but I too expect that they let the owner transfer their domain away. I am not currently concerned, because I think they will let the owner transfer it away probably in less than a week if the owner has a constructive dialogue with them.

pluto_modadic|2 years ago

so they seized the domain kinda like you do with malware?

it's unfortunate that the only button for Vercel admins is "seize everything in this account", as that's a bit imprecise if one domain is hacked

but if it's a person willfully violating TOS, then it's not really a hacked box, it's an intentionally created thing - and maybe that means that person shouldn't be a customer of Vercel anymore.

jitl|2 years ago

Of course an account running a site based on violating copyright is eventually going to be suspended. Any service provider in US jurisdiction will do the same. It's not a matter of opinion or policy for Vercel, or unusual terms of service. It’s critical for Vercel’s business continuity.

Services are protected from copyright claims under the DMCA “safe harbor” laws as long as they pass along copyright notices to their users, and take down content if the user is unresponsive. Otherwise Vercel would become liable for the copyright violation in addition to the user.

If Vercel doesn’t honor the DMCA safe harbor requirements, then Vercel’s providers will shut down Vercel itself. AWS could suspend Vercel’s use of Lambda/EC2, Vercel’s DNS provider could stop answering DNS queries for hosted domains, etc.

I’ve worked twice at service providers protected by DMCA safe harbor (first at UC Berkeley’s ISP, now at Notion) and can tell you that for service providers the consequences of losing DMCA safe harbor are just as severe than the consequences for the user. Early in my days at Notion, we missed a DMCA takedown notice for a public page, the copyright holder escalated to Amazon, and Amazon threatened to terminate the EC2 instances running our service.

https://www.copyright.gov/512/#:~:text=Overview%20of%20Secti...

ForkMeOnTinder|2 years ago

> Worst yet, they took down all my projects and confiscated all my domains

Never put all your eggs in one basket.

Keep your domains at one company. Your DNS with another. Hosting, a third.

If you have activist-type projects that might attract the attention of powerful people or companies, keep those segregated from your more banal projects in their own isolated accounts.

It sucks seeing people learn this the hard way.

amadeuspagel|2 years ago

> Keep your domains at one company. Your DNS with another. Hosting, a third.

This just means that there are three companies that can shut you down.

apitman|2 years ago

I agree on hosting, but what additional advantage does separating your DNS from domain registry add?

notfried|2 years ago

Tangential, but I quite like the error page. Informative, concise and avoids any confusion as to what is going on.

> This Deployment has been disabled.

> Your connection is working correctly.

> Vercel is working correctly.

> If you are a visitor, contact the website owner or try again later.

> If you are the owner, please contact support.

Mandatum|2 years ago

Sounds like it’s resolved. Author just got angry after getting back from holiday, and seeing their access to every site they own is cut. Which is reasonable given it seems Vercel doesn’t have site level granularity of restricting access.

Which is worrisome.

What other level of granularity are they missing? Do I need to worry about security and access controls?

Kwpolska|2 years ago

It's probably not a technical issue with granularity. Vercel probably decided they don't want to do business with someone who broke their ToS and nuked the entire account.

jauntywundrkind|2 years ago

Can you link to any resolution? All I can see on X/Twitter is the one submitted post.

raxi|2 years ago

It is online at 1ft.io

I read that from recent magnolia commits, it falls back to {12,1}ft for some websites (apparently, some techniques cannot be done on client-side, perhaps, they require proxies in particular countries or google network to impersonate googlebot better)

ajkjk|2 years ago

The top reply is from Vercel:

> Hey Thomas. Your paywall-bypassing site broke our ToS and created hundreds of hours of support time spent on all the outreach from the impacted businesses. > Our support team reached out to you on Oct 14th to let you know this was unsustainable and to try to work with you.

The poster immediately misunderstood them and thought the hundreds of hours were for talking to him. But they also sounded reasonable afterwards.

> I’ve received 4 emails from vercel support in 2023, I don’t think that constitutes hundreds of hours of work > But tbf I get it if you want to be an opinionated hosting provider and not host 12ft. No worries here, just restore my other projects and give me my domains back and we chill

echelon|2 years ago

A couple of platform providers have burned me so bad that I will absolutely move my business and tell others about my bad experiences.

In 2008, GoDaddy let an associate transfer StrategyWiki.org and a bunch of other domains out of my account while I was on a college trip with no internet. I'd spent half a decade building up these projects, and they were stolen away without my knowledge. GoDaddy offered no recourse or apology. The guy that performed the heist was 15 years my senior and from a family of lawyers, which he absolutely threatened me with if I tried to fight him. Even though GoDaddy ownership has changed, I do not like them to this day.

Over the past few years, I maintained a personal Netlify account for hosting a bunch of personal websites. When I started building my startup on Netlify, they moved my personal websites out of their free tier (despite them being in a different account) and into a paid plan. They started charging my card (which I wasn't aware of), and when I changed my billing info they deleted my websites entirely. There was no option to restore them, and their support was incredibly rude. They kept telling me what I had to do to undo their mistake without offering to do it themselves.

Netlify is horrible. Rude and unhelpful.

I was just about to move over to Vercel, but if they're no better than Netlify, I may as well stay put.

unraveller|2 years ago

If Vercel is working for the "impacted businesses" so much then why aren't they charging them for the hours worked entrenching their market position and busting their business model critics? Why send the bill for that time to him if it's not in ultimate service of him? He rightly sees through their incorrect billing stance. Seems like Vercel takes sides in every industry so you better hope your business has no impact on any other if you go with them.

We need little guys out there correcting the record of these "elusive content" publishers trying to claim exclusive access is all they offer when moments before it was available for free to anyone listening. He just proves they value bot access more than human audience. Maybe he does to, maybe he only wants bots to access his website. Vercel says no, only big business can get away with that freedom to choose one's audience makeup.

1vuio0pswjnm7|2 years ago

DEPLOYMENT_DISABLED

Saw this in the HTTP response yesterday. 12ft.io had not been working correctly for months anyway, e.g., for ft.com.

Now I just use on.ft.com URLs and find FT articles syndicated on other sites. Works fine.

hipadev23|2 years ago

When are people gonna learn you need to keep domain ownership, DNS, and where you host your website fully separate.

silenced_trope|2 years ago

I'm not sure if anyone actually does this despite your claim.

Most people who go AWS for hosting, also use their domain/DNS services.

Likewise for the others.

jonny_eh|2 years ago

What was the site? What’s the context?

chomp|2 years ago

12ft.io is a paywall buster. Not sure on the context other than it might be against their ToS?

Mandatum|2 years ago

I wonder if this is the first time the author has heard from Vercel.

I suspect Vercel never wanted to host this persons content given the amount of legal requests they likely had to deal with.

It probably would have been better business from Vercel to reach out and say, “Hey, it costs us too much money in legal fees dealing with your content. We’re not Amazon. Can you move somewhere else?”

Asking the question and not waiting until it’s too late to deal with it would have been the way to go.

Vercel has known about this site for a long time. Seems a weird way to deal with it, and tells me that their CS team don’t do much proactive support.

jsnell|2 years ago

According to the thread the author was given two weeks notice by Vercel.

stuckkeys|2 years ago

I was wondering where I had heard of that domain name. Then it finally clicked. First time I am hearing about vercel. What would constitute as breach of TOS? Is it because he is providing it as a service (free/paid not sure exactly)? I also thought it was based on cached content!? Also, did he not have any backups elsewhere? I could never solely rely on the cloud services. They can change their TOS anytime and screw you over.

silenced_trope|2 years ago

12ft.io never worked well for me.

But archive.is generally always works.

PawgerZ|2 years ago

12ft.io accepts money from websites that want to be blacklisted from their service.

Archive.is goes in captcha loops everytime I try to open it.

I've resorted to just using reader mode and bookmarklets that others have made.

bdcravens|2 years ago

> But tbf I get it if you want to be an opinionated hosting provider and not host 12ft. No worries here, just restore my other projects and give me my domains back and we chill

Why would you want to continue to do business with them? Unless of course you built your site in such a way that they are your only (practical) hosting option, which seems like a bad approach no matter apps you're building.

aaomidi|2 years ago

Once a company does this, that company is basically fully done in my mind. The damage is done to their brand and is irreversible.

schmijos|2 years ago

> confiscated all my domains

Please always separate registrar from DNS provider!

The reason is this:

* Registrars are your legal contract partner regarding the domain name.

* DNS providers are you technical partner for making something available under the domain name.

m-p-3|2 years ago

Using a more lenient host, and publishing the un-paywalled content on IPFS could be a more sustainable option that would also be harder to take down.

benatkin|2 years ago

[deleted]

dang|2 years ago

> I think HN should [...] stop hyperbolic ones from hitting the front page

How could we do that?