Slack was hacked

#1

Post by trustfundbaby » Fri, Mar 27, 2015, 4:42 PM UTC

Re: Slack was hacked

#2

Post by rudolf0 » Fri, Mar 27, 2015, 4:48 PM UTC

It's refreshing to 1) see a breach notification including the actual password hashing algorithm, 2) see they're using a strong one like bcrypt (presumably with a reasonable cost factor).

Regardless, this is an example of why cloud communication (and ticketing and database off-loading [see MongoHQ] and...) systems probably won't ever become commonplace in most of the government space and the finance and health sectors.

Re: Slack was hacked

#3

Post by bitsweet » Fri, Mar 27, 2015, 4:49 PM UTC

> No financial or payment information was accessed or compromised in this attack.

This wouldn't be my first concern. It would be all of the confidential communication that happens within slack.

Re: Slack was hacked

#4

Post by [deleted] » Fri, Mar 27, 2015, 4:49 PM UTC

[deleted]

Re: Slack was hacked

#5

Post by jxm262 » Fri, Mar 27, 2015, 4:50 PM UTC

bitsweet wrote: post #3

> No financial or payment information was accessed or compromised in this attack. This wouldn't be my first concern. It would be all of the confidential communication that happens within slack.

Agreed. The content of the chat's would be potentially much more important in my mind.

Re: Slack was hacked

#6

Post by larsiusprime » Fri, Mar 27, 2015, 4:50 PM UTC

Slack encourages 2-factor authentication:

> Download and install either the Google Authenticator or Duo Mobile apps on your phone or tablet.

Hey Slack, I don't have a smartphone. What am I supposed to do?

Re: Slack was hacked

#7

Post by ihodes » Fri, Mar 27, 2015, 4:51 PM UTC

bitsweet wrote: post #3

> No financial or payment information was accessed or compromised in this attack. This wouldn't be my first concern. It would be all of the confidential communication that happens within slack.

The post notes that the breached database is the user table, which would not contain chat history. I agree that making this abundantly clear makes sense.

Re: Slack was hacked

#8

Post by ocdtrekkie » Fri, Mar 27, 2015, 4:53 PM UTC

Literally was arguing with someone like two days ago that using Slack for sensitive data was a bad idea, guaranteed to blow up in your face sooner or later.

Nothing sweeter than "I told you so".

Re: Slack was hacked

#9

Post by [deleted] » Fri, Mar 27, 2015, 4:53 PM UTC

[deleted]

Re: Slack was hacked

#10

Post by fillskills » Fri, Mar 27, 2015, 4:53 PM UTC

bitsweet wrote: post #3

> No financial or payment information was accessed or compromised in this attack. This wouldn't be my first concern. It would be all of the confidential communication that happens within slack.

My concern are the usernames, emails and phone numbers that were probably not encrypted