News for hackers. Stuff that matters.

A comment on Ask HN: If your company cares about security, why does it use Slack?. Parent comment

Re:Ask HN: If your company cares about security, why does it... by eropple on Wednesday June 28, 2017 @01:11PM (#14655981)
> Why do you assume that Slack's security expertise and security budget is greater than your own?

I don't assume it. I know it for a fact; I've met some of their team and I know others by reputation. And I'm not exactly a slouch when it comes to this stuff (I don't eat and sleep crypto but a large part of my business is building secure infrastructure/consulting on the systems running on that infrastructure for regulated as well as non-regulated environments).

[ Parent | on HN ]
Re:Ask HN: If your company cares about security, why does it... by count on Wednesday June 28, 2017 @01:12PM (#14655990)
Slack has, publicly, a multi-member security team! That's entirely focused on the chat system that I don't have to put any of my teams time towards.
[ Parent | on HN ]
Re:Ask HN: If your company cares about security, why does it... by fweespeech on Wednesday June 28, 2017 @01:22PM (#14656116)
I'm curious...

Which is more secure?

A) Slack.

B) Open source software on a LAN accessible only through physical entry, SSH, and/or a VPN.

[ Parent | on HN ]
Re:Ask HN: If your company cares about security, why does it... by type0 on Thursday June 29, 2017 @06:32PM (#14667396)
I would say that Patchwork which runs on SSB protocol is more secure than Slack (if used on your LAN) and it's written in a freaking javascript.
[ Parent | on HN ]
Re:Ask HN: If your company cares about security, why does it... by count on Wednesday June 28, 2017 @01:29PM (#14656194)
I'd vote slack.
[ Parent | on HN ]
Re:Ask HN: If your company cares about security, why does it... by fweespeech on Wednesday June 28, 2017 @01:37PM (#14656269)
> I'd vote slack.

Then I suggest you put more effort into securing your LAN situation because that is a vote indicating your belief your workstations are insecure.

[ Parent | on HN ]
Re:Ask HN: If your company cares about security, why does it... by count on Wednesday June 28, 2017 @01:40PM (#14656311)
If you don't assume your user/dev workstations are insecure, you're going to have a rough time in life.
[ Parent | on HN ]
Re:Ask HN: If your company cares about security, why does it... by eropple on Wednesday June 28, 2017 @02:01PM (#14656566)
I'm pretty confident in saying that 95% of companies have worse endpoint protection, local network protection, cloud protection, or the intersection of any two or three of those things than Slack does application protection. Maybe more than 95%.
[ Parent | on HN ]