Live data from Hacker News

What If All Your Slack Chats Were Leaked?

nytimes.com

21–30 of 127 posts

Re: What If All Your Slack Chats Were Leaked?

#21
post #11

Earlier quoted context omitted.

Just let each client index locally

How big is your hard drive? How about on your phone? I guess there's also the problem of how to let a new joiner view previous messages. Can that be done with e2e encryption?

Unless the channels you’re on amount to at least one Bible-length document per day and you’re trying to index multiple years of content, the storage requirements for an index aren’t going to be a problem.

Re: What If All Your Slack Chats Were Leaked?

#22
post #9

First thought: who the hell would be interested to read thousands of lines of discussions like how to name a field in REST response or notifications of someone making a build xD

Nobody, but it's not about that. It's about trade secrets, access keys for e.g. AWS, git; it's about private information that can be used for social engineering or extortion. If a malicious actor can take over someone's account they could do even more convincing social engineering and access confidential information.

If you think "I have nothing to hide" you're lacking in imagination.

Re: What If All Your Slack Chats Were Leaked?

#23

What if all your search history were leaked? What if all your text messages were leaked? What if all your emails were leaked? I guess those things aren't trendy enough to worry about. For a long time I have noticed what I would call 'ankle biting journalism'. Basically take whatever is trendy, make only the most obvious observations about it (things that someone who only rudimentary knowledge would come up with in a…

I would assume this article was "paid for" (perhaps not directly) by someone with a vested interest. E.g. a competitive vendor with a better security story, or whoever is having their legacy lunch eaten by Slack.

Re: What If All Your Slack Chats Were Leaked?

#24
post #9

First thought: who the hell would be interested to read thousands of lines of discussions like how to name a field in REST response or notifications of someone making a build xD

A variation of this argument always seems to come up in discussions about privacy.

Yes, 99.9% of what you do or say in your daily life is likely of no consequence. But every now and then you may do or say something that could be used against you, and someone who has many years worth of data collected on you can probably find quite a few such bits of info.

Among all of your internet "transactions" probably less than 0.1% are with your bank, for instance (sending your credentials, etc). You want end-to-end encryption and good security to protect that 0.1% of your data, not for the other crap.

Re: What If All Your Slack Chats Were Leaked?

#26
I mean, the article is generally right but they immediately get a detail wrong:

> Right now, Slack stores everything you do on its platform by default — your username and password ...

I would be extremely surprised if they store plaintext or even encrypted passwords. Maybe the author means usernames/passwords sent in messages, but that's not unique to slack.

Re: What If All Your Slack Chats Were Leaked?

#27
post #9

First thought: who the hell would be interested to read thousands of lines of discussions like how to name a field in REST response or notifications of someone making a build xD

I'm sure the Gawker employees thought the same thing, until their chat logs were brought up in court http://nymag.com/intelligencer/2016/03/what-hulk-hogan-taugh... https://splinternews.com/the-gawker-hulk-hogan-trial-and-the...

The nature of those discussions is quite different. I'm making jokes about our API, not world-known wrestler :)

Re: What If All Your Slack Chats Were Leaked?

#28
post #16

What if all your search history were leaked? What if all your text messages were leaked? What if all your emails were leaked? I guess those things aren't trendy enough to worry about. For a long time I have noticed what I would call 'ankle biting journalism'. Basically take whatever is trendy, make only the most obvious observations about it (things that someone who only rudimentary knowledge would come up with in a…

"In hindsight, complying with the company's Document Retention Policy (which at Netscape was basically, ``shred anything within 90 days unless you can't get your job done without it'') might have been a good idea." [1] Do companies no longer have Document Retention Policies? That seems like the bigger piece of the story here. [1] https://www.jwz.org/gruntle/rbarip.html

It depends on the information that’s flowing in them. If they are under compliance purview then they might have to retain or at least archive years worth of information.

Re: What If All Your Slack Chats Were Leaked?

#29
Easy - I don't give a damn and have no expectation they won't be leaked.

To be clear, when I use Slack I assume private chats will remain private, but if they don't, well... screw it. It's not like I paid for it so how am I entitled to anything? No vendor can promise they won't get hacked. What if your Linux OS got hacked due to a zero-day bug and all your DB data was leaked?

Re: What If All Your Slack Chats Were Leaked?

#30

I've been spending all these years holding my tongue because as a matter of principal I don't write anything I don't want a permanent record of and it would be nice to see all that overhead pay off or more accurately, it would be nice to see people get burned for being sloppy. So no, I wouldn't really stand to lose anything if everything I ever said on company chat was published in an easily searchable format online.

The Oliver North doctrine.
Post reply on HN