Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Wanna know what product your competitor is working on? Try Slack

tanay.co.in

Post reply on HN
Print view View original

51–60 of 145 posts

Re: Wanna know what product your competitor is working on? Try Slack

#51

Post by tomp »

ayrx wrote: post #46
tomp wrote: post #11

Earlier quoted context omitted.

The way companies handle security disclosures lately (i.e. laughing it off, or paying $6 reward), it seems like shaming them would work much better. Plus, this is truly a beginner-level failure, the kind you'd get insulted for by Linus.

Completely untrue about the people at Slack. I disclosed a pretty trivial vulnerability to them and got a $100 reward. How about next time you stop generalising?

I'm not generalizing, and I don't really care about Slack. I'm just putting forward a hypothesis about what might be going on in a security researcher's brain when they stumble upon a vulnerability.

Re: Wanna know what product your competitor is working on? Try Slack

#52

Post by yen223 »

DHowett wrote: post #39

While I'm unable to comment on the content of the article, I really have to applaud HostGator's error page marketing strategy here. We've met with a horrible fate (status code 500) while generating what appears to be a static page. This site is hosted by HostGator! Get yours now!

If they're generating 500 errors while serving up static sites, someone is doing something very wrong.

Re: Wanna know what product your competitor is working on? Try Slack

#53

Post by vertex-four »

whizzkid wrote: post #23

I can see that both Microsoft and Google have tried Slack at least. This doesn't mean they are still using it (vice versa). Since Skype is not really light-weight anymore and Google chat did not really take off, It looks like that Slack found himself a good spot in between.

Microsoft have a hell of a lot of teams (separate Slack instances). I'd be surprised if none of them are being used.

Re: Wanna know what product your competitor is working on? Try Slack

#54

Post by anon1385 »

richmarr wrote: post #43
tomp wrote: post #11

Earlier quoted context omitted.

The way companies handle security disclosures lately (i.e. laughing it off, or paying $6 reward), it seems like shaming them would work much better. Plus, this is truly a beginner-level failure, the kind you'd get insulted for by Linus.

Shaming Slack is one point. This guy just exposed the confidential information of who knows how many of Slack's customers. In my opinion that's douchery of epic proportions.

Maybe this kind of exposure is the only way we will teach people to stop trusting fly-by-night cloud startups with their confidential data?

Re: Wanna know what product your competitor is working on? Try Slack

#55

Post by jfroma »

junto wrote: post #25
jdkanani wrote: post #22

I just realized that any facebook user can signup on https://facebook.slack.com/ with his fb username.

And this is why you should silo customer domains from internal domains as github did (smartly)!

Facebook might have a directory of employees, ldap or something.

Too bad slack doesn't support any of this. This is the price they have to pay for reinventing username and password authentication and requiring everyone to register.

It is also bad since employees quit or are fired, and you don't want to have to maintain a directory of employees on every application you use.

Shameless plug, I work for https://auth0.com and we make this easier.

Re: Wanna know what product your competitor is working on? Try Slack

#57

Post by TeMPOraL »

anon1385 wrote: post #54
richmarr wrote: post #43

Earlier quoted context omitted.

Shaming Slack is one point. This guy just exposed the confidential information of who knows how many of Slack's customers. In my opinion that's douchery of epic proportions.

Maybe this kind of exposure is the only way we will teach people to stop trusting fly-by-night cloud startups with their confidential data?

This. That was exactly a kind of vulnerability that is meant to be publicly disclosed. Nothing of matter will happen to anyone because of that vulnerability, but people might remember it and next time they'll think twice about how they handle authentication.

Re: Wanna know what product your competitor is working on? Try Slack

#58

Post by pkorzeniewski »

Seriously, just the idea of keeping ALL your company internal conversations on a 3rd party server is quite crazy, but to get access without even hacking anything.. I wonder if situations like this will result in business customers more carefully evaluating SaaS solutions that deal with sensitive data, because "in-house" solutions may be old school, but at least a) no one will suddenly terminate the service and b) all data is kept locally.

Re: Wanna know what product your competitor is working on? Try Slack

#59

Post by waseem_ »

kolev wrote: post #48
smt88 wrote: post #19

Earlier quoted context omitted.

Neither Skype nor Hangouts are intended to compete with Slack. They're consumer products, while Slack is intended for business teams.

I'm sure way more businesses use Skype and Hangouts than Slack and HipChat.

Skype is actually pretty good for teams. I used to work at a company where it was our primary medium of communication, and we were almost forty people. It's extremely easy to create a group chat in Skype and destroy it with IRC OPs like features. It is also tempting to use since Skype provides a way to initiate a voice call right there from the chat. And one can always access the chat history as well. People have also written Skype bots.
Post reply on HN