News for hackers. Stuff that matters.

A comment on Slack's Compliance Exports allow Team Owners, Admins read users' direct messages.

Re:Slack's Compliance Exports allow Team Owners, Admins read... by pavement on Tuesday July 18, 2017 @03:23PM (#14799293)
...and so, if you know your company is paying any amount of money for their slack channel, you must assume it is the "Compliance Export" version, unless you have direct awareness of the version your company has paid for.

Furthermore, and this should go without saying, no matter what your company pays for, you also must assume that Slack themselves possess god mode across all channels, except maybe "on prem" implementations if that's what they mean by enterprise/discovery api.

When a feature like this is in the loop at all, how can any ordinary end user presume any other level of trust?

[ Parent | on HN ]
Re:Slack's Compliance Exports allow Team Owners, Admins read... by detaro on Tuesday July 18, 2017 @03:25PM (#14799309)
regarding your first paragraph, you can also just check if it is enabled or not.
[ Parent | on HN ]
Re:Slack's Compliance Exports allow Team Owners, Admins read... by pavement on Tuesday July 18, 2017 @03:32PM (#14799369)
Hmmm, let's see... Looking around... and... Nope, not an option for me. I am not permitted to check the feature on the particular channel I'm logged into at the moment. I am a lesser user, without admin privileges, accessing a paid channel.

Meanwhile, on another channel, under the Customize Slack menu:

  > Compliance Exports
  > Compliance Exports are not enabled for your team. Learn more and apply for Compliance Exports.
Looks like not everyone is allowed to access every feature or inspect all settings on every Slack channel they belong to.
[ Parent | on HN ]
Re:Slack's Compliance Exports allow Team Owners, Admins read... by detaro on Tuesday July 18, 2017 @03:57PM (#14799544)
Interesting, for my example the link in the article clearly showed the status. That's disappointing if it can be hidden.
[ Parent | on HN ]
Re:Slack's Compliance Exports allow Team Owners, Admins read... by pavement on Tuesday July 18, 2017 @05:24PM (#14800191)
Yeah, not sure if this is supposed to be a warrant canary or what.
[ Parent | on HN ]