Live data from Hacker News

Wanna know what product your competitor is working on? Try Slack

tanay.co.in

141–145 of 145 posts

Re: Wanna know what product your competitor is working on? Try Slack

#142
post #48
post #19

Earlier quoted context omitted.

Neither Skype nor Hangouts are intended to compete with Slack. They're consumer products, while Slack is intended for business teams.

I'm sure way more businesses use Skype and Hangouts than Slack and HipChat.

You're right. So what?

There are many businesses that still use Excel as their CRM software, even though there are purpose-built apps that work better.

My point is that Slack, Hipchat, and others are specifically targeting businesses. Having an API with integrations to other software (CRMs, issue trackers, PM, etc.) is one huge advantage over Skype, just as an example.

Re: Wanna know what product your competitor is working on? Try Slack

#143
post #3

This is something that could definitely have been reported to Slack before disclosing it publicly. Maybe he did that, but it's not mentioned in the blog post so I assume he didn't. It's just a nice thing to do and they might reward you for it. You can still post it on your blog after they released a fix.

Responsible disclosure serves is nothing more than a cover for bad software venders.

You are under absolutely no obligation to do work for free that these companies should have been doing in the first place.

Re: Wanna know what product your competitor is working on? Try Slack

#144
post #46
post #11

Earlier quoted context omitted.

The way companies handle security disclosures lately (i.e. laughing it off, or paying $6 reward), it seems like shaming them would work much better. Plus, this is truly a beginner-level failure, the kind you'd get insulted for by Linus.

Completely untrue about the people at Slack. I disclosed a pretty trivial vulnerability to them and got a $100 reward. How about next time you stop generalising?

Pretty sure the going rate for a pen-tester is much, much higher than 100 usd an hour - and they would get paid even if they didn't find anything.

Re: Wanna know what product your competitor is working on? Try Slack

#145

Therefore I prefer using encrypted platforms like https://telegram.org/ or https://stackfield.com - they really take care of privacy and data protection.

Encryption avoids a lot of problems, but this has _nothing_ to do with encryption
Post reply on HN