What if All Your Slack Chats Were Leaked?

guest · Jul 2, 2019

What if All Your Slack Chats Were Leaked?
Unless the company makes changes to its encryption and retention policies, using Slack could put your data at risk
July 1, 2019
https://www.nytimes.com/2019/07/01/opinion/slack-chat-hackers-encryption.html

Slack is one of many Silicon Valley unicorns going public this year, but it’s the only one that has admitted it is at risk for nation-state attacks

According to Slack’s S-1 form, the company faces threats from “sophisticated organized crime, nation-state, and nation-state supported actors.”
The company acknowledges that its security measures “may not be sufficient to protect Slack and our internal systems and networks against certain attacks,” and correctly assesses that it is “virtually impossible” for the company to completely eliminate the risk of a nation-state attack.

Instead, Slack retains all of your messages but makes only the most recent 10,000 visible to you. Everything beyond that 10,000-message limit remains on Slack’s servers.
It’s time for Slack to step up, minimize the amount of sensitive data hanging around on its servers and give all its users retention controls.
Click to expand...

Minimalist · Jul 18, 2019

Slack Resets Account Passwords Compromised During 2015 Hack

Slack has started sending out emails informing users that their account passwords have been reset due to being compromised during the Slack 2015 security incident. Slack has stated that this is only affecting 1% of their users.
Click to expand...

https://www.bleepingcomputer.com/ne...count-passwords-compromised-during-2015-hack/

Minimalist · Jul 29, 2019

Slack Experiencing Large-Scale Outage Caused by Messaging Issue

The Slack messaging service is currently experiencing a large-scale outage caused by a messaging issue impacting users from all over the world.
Click to expand...

https://www.bleepingcomputer.com/ne...large-scale-outage-caused-by-messaging-issue/

guest · Dec 18, 2019

Your workmates might still be reading that 'unshared' Slack document
December 16, 2019
https://www.theregister.co.uk/2019/12/16/slack_filesharing_vulnerability_post_sharing/

Security researchers have uncovered a flaw in messaging app Slack that allows a file shared in a private channel to be viewed by anyone in that workspace – even guests.

"If you share your file once, even if you later unshare it, that file can still be exposed to other people, without any indication to you,” said Polyrize, adding that the vuln includes the viewing of files through API queries.
According to Polyrize, however, if someone in a private conversation shares a file from it to a different conversation, that bypasses the controls.

A Slack spokesman told The Register: "We understand how important file security is for Slack's customers. The behavior described only applies to two types of files in Slack, Snippets and Posts (two options for sharing and collaborating around longer form content in Slack). Most files shared in Slack are not these types of files."
As described, working around the vulnerability is fairly easy: don't use Slack to share sensitive files. If you must use Slack to do that thing, only share files with people whom you trust not to reshare them into different conversations.
Click to expand...

Log in or Sign up

What if All Your Slack Chats Were Leaked?

guest Guest

Minimalist Registered Member

Minimalist Registered Member

guest Guest

Log in or Sign up

What if All Your Slack Chats Were Leaked?

guest Guest

Minimalist Registered Member

Minimalist Registered Member

guest Guest

Useful Searches