News for hackers. Stuff that matters.
Re:Posting successful SSH logins to Slack by _yy on Friday January 22, 2016 @08:43AM (#10952608)
Is Slack really the right place for security-critical notifications?
Re:Posting successful SSH logins to Slack by Klathmon on Friday January 22, 2016 @08:46AM (#10952617)
yes?

I mean the next step is to have an automated phone call go out to people (which is what we do for critical alerts).

Short of that, slack is on my desktop, laptop, and phone. If i don't have one of those around me at the time, you aren't getting ahold of me for any reason.

So yeah i think it's perfectly valid for security-critical notifications. Plus this isn't as security critical as you'd think. I don't want klaxons going off every time someone sshs into a server... This can just be an additional layer of security.

Re:Posting successful SSH logins to Slack by plasticxme on Friday January 22, 2016 @02:57PM (#10955166)
Slack is terrible for auditing, though. What's wrong with email?
Re:Posting successful SSH logins to Slack by RubyPinch on Friday January 22, 2016 @02:59PM (#10955181)
people are more likely to be looking at chat windows as opposed to emails
Re:Posting successful SSH logins to Slack by Tepix on Friday January 22, 2016 @08:58AM (#10952691)
Not in my book. Slack seems to be really cool but since it's not self-hosted and owned by a US entity, I'll stay clear.
Re:Posting successful SSH logins to Slack by pc86 on Friday January 22, 2016 @09:11AM (#10952761)
It's an ssh login notification with a user and IP address. It's not notifying everyone what the new launch codes are. Let's not overstate it.
Re:Posting successful SSH logins to Slack by Tepix on Friday January 22, 2016 @11:48AM (#10953808)
I'm not referring to the SSH logging, I mean slack in general.
Re:Posting successful SSH logins to Slack by HeadlessChild on Friday January 22, 2016 @06:32PM (#10956268)
We just discovered that some developers at my workplace use their domain user account credentials for Slack as well. My manager was not happy.
Re:Posting successful SSH logins to Slack by pavel_lishin on Friday January 22, 2016 @10:09AM (#10953087)
What would you use instead?
Re:Posting successful SSH logins to Slack by falcolas on Friday January 22, 2016 @12:16PM (#10954038)
IRC on a server I control, or some slack clone with on-premise hosting. Call me paranoid, but I'm paranoid.
Re:Posting successful SSH logins to Slack by placeybordeaux on Friday January 22, 2016 @05:13PM (#10955925)
I still don't understand why everyone is so excited about slack, it really doesn't offer that much more than IRC.
Re:Posting successful SSH logins to Slack by pavel_lishin on Saturday January 23, 2016 @05:22PM (#10960398)
I use IRC, but come on. It offers a lot more than IRC right out of the box.

* File uploads

* Embedding portions of links (tweets, images)

* A very good search

* Multi-line posts

* Code-formatting, including multi-line posts, and also snippets.

* A mobile client that alerts you when someone mentions you.

* Scroll-back history when you sign on at any time.

* Syncing between multiple clients.

Yes, you could create a bot or modify an irc server to do this, and then find or write a client that will do all that stuff, and an irc bouncer can fill in for a lot of this.

But Slack does it out of the box. Zero extra work needed.

I like IRC, but if you claim that Slack doesn't offer anything more than IRC, you're either delusional or using an incredibly broad definition of IRC.

Re:Posting successful SSH logins to Slack by ryanlol on Saturday January 23, 2016 @11:32AM (#10958852)
It offers marketing and support, that's about it.

Nobody is selling IRC.

Re:Posting successful SSH logins to Slack by lwhalen on Sunday January 24, 2016 @04:36AM (#10962063)
cough www.grove.io would like a word with you ;-)
Re:Posting successful SSH logins to Slack by ryanlol on Sunday January 24, 2016 @06:44AM (#10962261)
Looks cool, but

>We're sorry but Grove isn't currently accepting new customers right now.

I guess with that pricing structure they don't need to.

Re:Posting successful SSH logins to Slack by lwhalen on Sunday January 24, 2016 @12:30PM (#10963163)
Well shucks, that is news to me. Thanks for the update.
Re:Posting successful SSH logins to Slack by melicerte on Friday January 22, 2016 @10:48AM (#10953360)
Mattermost
Re:Posting successful SSH logins to Slack by ex3ndr on Friday January 22, 2016 @11:07AM (#10953492)
or Actor.im
Re:Posting successful SSH logins to Slack by random_rr on Friday January 22, 2016 @11:45AM (#10953796)
Are you asking if a communication platform is a good place for communications?

Yes.