News for hackers. Stuff that matters.

A comment on Slack Security Incident. Parent comment

Re:Slack Security Incident by johncolanduoni on Friday July 19, 2019 @10:22AM (#20478869)
The issue looks to be that they thought they had informed all the affected users back in 2015, but underestimated the set of affected users. The breach certainly wasn’t secret until today, they posted it publicly at that time: https://slackhq.com/march-2015-security-incident-and-the-lau....
[ Parent | on HN ]
Re:Slack Security Incident by madisp on Friday July 19, 2019 @10:29AM (#20478924)
they failed to mention that malicious code was reading plaintext passwords though
[ Parent | on HN ]
Re:Slack Security Incident by rickyc091 on Friday July 19, 2019 @10:35AM (#20478974)
I also believe they were aware of this problem in March of 2019 as I was forced to do a password reset on my affected Slack account from my password manager last updated timestamp.
[ Parent | on HN ]