Live data from Hacker News

What If All Your Slack Chats Were Leaked?

nytimes.com

91–100 of 127 posts

Re: What If All Your Slack Chats Were Leaked?

#93

I worked for a fortune I reported it to security. Next day I'm suspended. Turns out security did it because they wanted to search through 'just in case' but didn't want to go through the process properly. Either it was my fault or they were incompetent, guess which one they chose. I was forced to quit eventually.

I hope you hired a good lawyer and made them pay handsomely for this. They would have deserved it.

Oh yes, and they played the long game until it was economically self destructive for me to continue. Never forget the time advantage a corporation has over an individual.

In the end I lost all my equity.

Re: What If All Your Slack Chats Were Leaked?

#94
I live by the following hierarchy:

- Anything written down and transmitted digitally will be available to anyone who wants it eventually. Besides my copy, the recipient has a copy, as do any number of intermediaries. Encrypted or not, that encryption will almost certainly be broken in my lifetime.

- Anything written down on physical medium or stored digitally (but not transmitted) will be freely available to anyone that wants it eventually. It's slightly more secure than a digital copy, because I have physical control over the only copy and would most likely know if that physical control was compromised (so my NAS is considered transmitted since it is possibly accessible).

- Anything I say to someone in person is pretty safe, depending on how much I trust them not to record what is said (otherwise it becomes classified as digitally transmitted). Of course now a copy remains in their mind's eye, which is in some cases worse since it can be modified and they don't even know it.

- Any thought I have that I have never expressed outside my body is almost completely safe, baring successful administration of truth serum (or until someone invents adversarial brain scans).

How does this affect me in real life? I don't write down things I wouldn't want other people to know, and I am pretty careful about saying things I don't want other people to know. I use encryption whenever I can because it will at least slow down the attackers, but I never assume something that is encrypted is safe.

Re: What If All Your Slack Chats Were Leaked?

#95
post #9

First thought: who the hell would be interested to read thousands of lines of discussions like how to name a field in REST response or notifications of someone making a build xD

I sincerely do not believe that. Somewhere in there is a joke like "They trust me with their data. Suckers" - Mark Zuckerberg. An obviously tongue-in-cheek comment that can be interpreted in a different way.

Lots of people believed what you did, but you only need to have said one thing.

Re: What If All Your Slack Chats Were Leaked?

#97
post #61
post #20

Earlier quoted context omitted.

Netscape, 1998: "And I keep thinking to myself, Microsoft is going to pay some jackass lawyer $200 and hour to find out that we hate our cafeteria food, don't like the security posters, had a sucky newsfeed, and think ``Navigator'' was a cooler name than ``Communicator''." [1] Just because you don't think you have anything interesting doesn't mean a competitor isn't going to subpoena it years later. [1] https://www.j…

jwz uses referrer detection to show something... interesting to the ycombinator cult, just fyi

lol yeah, opening link in Incognito bypasses that.

Re: What If All Your Slack Chats Were Leaked?

#98
post #61
post #20

Earlier quoted context omitted.

Netscape, 1998: "And I keep thinking to myself, Microsoft is going to pay some jackass lawyer $200 and hour to find out that we hate our cafeteria food, don't like the security posters, had a sucky newsfeed, and think ``Navigator'' was a cooler name than ``Communicator''." [1] Just because you don't think you have anything interesting doesn't mean a competitor isn't going to subpoena it years later. [1] https://www.j…

jwz uses referrer detection to show something... interesting to the ycombinator cult, just fyi

How amusingly childish!

Edit: That was before I read the article. He rants, with apparent sincerity, about the politically correct losers who thought that having an official, internal anything-goes-flamefest vent forum was a bad idea; describes how he went to great lengths to preserve it; finds out exactly why it really was a bad idea (it got subpoenaed so Microsoft could rake it for dirt); and then rants about that. At no point does he show any awareness of the irony.

What a guy.

Re: What If All Your Slack Chats Were Leaked?

#99
post #94

I live by the following hierarchy: - Anything written down and transmitted digitally will be available to anyone who wants it eventually. Besides my copy, the recipient has a copy, as do any number of intermediaries. Encrypted or not, that encryption will almost certainly be broken in my lifetime. - Anything written down on physical medium or stored digitally (but not transmitted) will be freely available to anyone t…

> - Anything written down [..]

> - Anything I say to someone [..]

In my hierarchy these two points are swapped. At least I think there is a real chance to keep written material secret as long as you are not a target of a state level adversary. I can write in a room where I am sure there are no cameras watching and I can put my copy in a safe where I would know if it was compromised. On the other hand I can almost never be sure not be audio recorded - be it deliberately or accidentally by any of the microphones that are almost everywhere nowadays.

Re: What If All Your Slack Chats Were Leaked?

#100
post #94

I live by the following hierarchy: - Anything written down and transmitted digitally will be available to anyone who wants it eventually. Besides my copy, the recipient has a copy, as do any number of intermediaries. Encrypted or not, that encryption will almost certainly be broken in my lifetime. - Anything written down on physical medium or stored digitally (but not transmitted) will be freely available to anyone t…

I have a very similar list to yours. I'm also a datahoarder though, so I also have the reverse characteristics, i.e. if I don't have a copy then assume there are no copies left for me to ever access (assume adversaries have a backup though).

> - Anything written down and transmitted digitally will be available to anyone who wants it eventually. Besides my copy, the recipient has a copy, as do any number of intermediaries. Encrypted or not, that encryption will almost certainly be broken in my lifetime.

I completely agree. So we're now assuming that the information will exist indefinitely for adversaries (NSA warehouse), however if I don't have a copy then it's effectively gone (for me only).

> - Anything I say to someone in person is pretty safe, depending on how much I trust them not to record what is said.

I'm not quite there yet, but I've become leary of all the phones, laptops, cameras, personal assistants, etc. While I'm from the US (so mass spying is supposed to be illegal), and most companies like Amazon/Apple have been shown to be "mostly telling the truth" in terms of how they only transmit data after a trigger phrase, it's a lot of microphones.

Let's assume the person I'm talking to is 100% trusted, all it takes is a hacked Alexa to leak the conversation.

Likely or practical? Not really. Do I do anything specific such that I'd consider myself a potential NSA target? Not really.

But I consider privacy a human right so it's always something I'm thinking about.

Post reply on HN