News for hackers. Stuff that matters.
Re:Slack is down by sytse on Monday January 04, 2021 @12:02PM (#25634146)
At GitLab our fallback from Slack is Zoom https://about.gitlab.com/handbook/communication/#emergency-c...

I'm posting this because I found a lot of people don't know that Zoom includes a complete chat client that includes channels.

And #HugOps to the engineers at Slack working on this. I appreciate that they posted a periodic update even when there was no news to report: "There are no changes to report as of yet. We're still all hands on deck and continuing to dig in on our side. We'll continue to share updates every 30 minutes until the incident has been downgraded."

Re:Slack is down by ourcat on Monday January 04, 2021 @12:31PM (#25634764)
I'm quite surprised that you don't use Mattermost as a 'Slack fallback' at GitLab.
Re:Slack is down by ekianjo on Monday January 04, 2021 @12:34PM (#25634845)
Indeed, if you champion FOSS, why would you recommend a proprietary piece of software as fallback?
Re:Slack is down by ourcat on Monday January 04, 2021 @12:40PM (#25634949)
My point was really that it's GitLab's own product. "GitLab Mattermost" [https://docs.gitlab.com/omnibus/gitlab-mattermost/]

I'm amazed they use Slack at all. Let alone as a fallback.

Re:Slack is down by OJFord on Monday January 04, 2021 @12:52PM (#25635138)
No I'm pretty sure that's just a sort of 'integration', Mattermost shipped with GitLab?

https://about.gitlab.com/blog/2015/08/18/gitlab-loves-matter...

> Like many companies in the last year we've switched to using Slack to improve internal communication. [...] Since Slack doesn't offer an on-premises version, we searched for other options. We found Mattermost to be the leading open source Slack-alternative and suggested a collaboration to the Mattermost team.

I'm not really sure why it's 'GitLab Mattermost' and not (at your link) 'GitLab Nginx' et al. though.

Re:Slack is down by ourcat on Monday January 04, 2021 @01:17PM (#25635556)
Ah I see now, having read more of the history. Calling it that seems pretty misleading/odd.

(We use GitLab and Mattermost (integration) where I work. I've been 'remote / WFH' for the past 7 years.)

Re:Slack is down by sytse on Monday January 04, 2021 @02:12PM (#25636372)
I agree it can be improved and created https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_request... to do so.
Re:Slack is down by tempest_ on Monday January 04, 2021 @12:55PM (#25635188)
They posted a giant list of the services they use recently.

They use a ton of services.

Likely you don't want your backup to be one of your systems and another part of the company probably uses Zoom already so it is probably easy to fail over to that.

Re:Slack is down by sytse on Monday January 04, 2021 @01:01PM (#25635284)
Here is the list of services that we use https://about.gitlab.com/handbook/business-ops/tech-stack/

This includes many proprietary ones, we generally choose the product that will work best for us, considering the benefits of open source, but not excluding proprietary software.

Mattermost is not part of the single application that GitLab is. There is a good integration between with GitLab and our Omnibus installer allows you to easily install it. But it is a separate application from a separate company.

Re:Slack is down by dvdbloc on Monday January 04, 2021 @02:14PM (#25636404)
Or use mattermost with Slack as the fallback
Re:Slack is down by daniellarusso on Monday January 04, 2021 @12:43PM (#25634991)
Maybe my DevOps folks should not be privy to all internal communications?

That is one reason we did not go with Mattermost.

Re:Slack is down by arpa on Monday January 04, 2021 @12:47PM (#25635057)
If you do not trust your own devops, why are you trusting someone elses devops?
Re:Slack is down by ericbarrett on Monday January 04, 2021 @01:02PM (#25635305)
It's just due diligence. Think of what you have access to if you have "god mode" on corporate chat: HR, the CFO's DMs, private messages between other coworkers, and so on. Most won't fall for this temptation, but even those with strong anti-spying morals can be weakened by circumstances. Best to remove the temptation by design.
Re:Slack is down by lostcolony on Monday January 04, 2021 @12:56PM (#25635207)
Because someone else's devops can't use it against you institutionally. Nor is going to insist on having an opinion on things that they're unaffected by.

This isn't a slam at devops, it's about the need for institutional information hiding; not everyone needs to know about and weigh in on every decision being made.

Re:Slack is down by Spivak on Monday January 04, 2021 @01:49PM (#25636051)
We structure our company similarly. With effort DevOps is god on everything except HR, Sales, Finance, Chat, and C-level management which are operated with 3rd party services controlled by the individual departments and "owned/managed" by the C-suite.
Re:Slack is down by toomuchtodo on Monday January 04, 2021 @12:52PM (#25635143)
Low maturity risk management functions.
Re:Slack is down by trastknast on Monday January 04, 2021 @02:30PM (#25636636)
Slack won’t protect you from this as it’s possible for admins to export even private DMs.

https://www.nbcnews.com/better/business/slack-updates-privac...

Re:Slack is down by Hnrobert42 on Monday January 04, 2021 @02:36PM (#25636719)
Only Slack Workspace Owners can export, not Slack Admins.
Re:Slack is down by daniellarusso on Monday January 04, 2021 @03:05PM (#25637093)
You also have to be on the ‘Plus’ plan, otherwise it is a roach motel.
Re:Slack is down by Jolter on Monday January 04, 2021 @01:24PM (#25635660)
Devops should have nothing to do with your chat server. It should be your IT department, just as with the email server.
Re:Slack is down by Spivak on Monday January 04, 2021 @01:54PM (#25636124)
DevOps at a lot of small companies also manage the internal IT stack and sometimes even take on most of the IT duties. Once you get larger you start having "IT" as something separate from DevOps but with the actual infrastructure managed by operations. Once you're really big the teams are truly separate and IT owns their own infra.
Re:Slack is down by res0nat0r on Monday January 04, 2021 @01:22PM (#25635616)
I'm guessing because they don't want the support burden on a rarely used but necessary fallback solution vs. something plug and play.

This is the reason these "closed" ecosystem apps like Slack/Zoom are multi billion dollar companies and have massive uptake. Simple and easy to user.

Re:Slack is down by bovermyer on Monday January 04, 2021 @02:06PM (#25636294)
As someone who has to use Zoom Chat to interact with a client on a daily basis, please, do not recommend Zoom Chat to anyone except as an example of how not to do chat software.

--

Though, I do agree wholeheartedly with your sentiment that the Slack team needs all the positive vibes they can get right now.

Re:Slack is down by meffie on Monday January 04, 2021 @03:02PM (#25637070)
As someone who has to use Zoom Chat every day, this a thousand times. (We still run an XMPP server on the side just to avoid the horror that is Zoom chat.)
Re:Slack is down by BlueTemplar on Monday January 04, 2021 @06:57PM (#25639995)
Yeah, this is baffling. I'd rather run turn of the century ICQ than Zoom chat...
Re:Slack is down by mxuribe on Monday January 04, 2021 @01:01PM (#25635290)
I continue to be impressed by GitLab's operations and documentation! While, yes, others may have similar backup plans, as an outsider, it feels like GitLab's handbook seems cooler even if only for their publishing, and making public of their practices and processes. I'll caveat that I'm not really a fan of zoom/slack/hangouts (I'm an unashamed fanboy of matrix and its numerous clients), but gitlab's approach is still really neat! Kudos to gitlab!
Re:Slack is down by ff333ttee on Monday January 04, 2021 @12:20PM (#25634542)
Aren't you worried about so many security vulnerabilities found in Zoom?
Re:Slack is down by cgh on Monday January 04, 2021 @02:35PM (#25636708)
Unpopular opinion, but WebEx beats the pants off Zoom. Of course, it's neither free nor open. But it does support strong end to end encryption and authentication and has regulatory compliance to a bunch of things, if that's important to you. I get that there is WebEx hate because "enterprise" etc, but we use it around here and it works quite well.
Re:Slack is down by lima on Monday January 04, 2021 @02:39PM (#25636764)
+1, both are a PITA but Webex at least has a really good web client.
Re:Slack is down by isodev on Monday January 04, 2021 @01:29PM (#25635740)
Nice tip! Zoom chat is cool (although chats without gifies are way too productive ).
Re:Slack is down by trykondev on Monday January 04, 2021 @01:56PM (#25636146)
Oh wow -- after years of using Zoom I definitely did not know about this. Thank you for pointing it out!
Re:Slack is down by jayd16 on Monday January 04, 2021 @01:03PM (#25635314)
Is this accessible from the web? Can't seem to find it with this Chromebook.
Re:Slack is down by sergiotapia on Monday January 04, 2021 @12:39PM (#25634930)
At Papa we use Discord as backup.
Re:Slack is down by kburman on Monday January 04, 2021 @01:33PM (#25635815)
Why not Mattermost or Flock?
Re:Slack is down by bww on Monday January 04, 2021 @12:10PM (#25634323)
Just a reminder that it's probably not a wise idea for anyone to get further in bed with Zoom than they already are.

https://www.washingtonpost.com/technology/2020/12/18/zoom-he...

Re:Slack is down by Frost1x on Monday January 04, 2021 @01:14PM (#25635488)
"Business takes the easy and ethically questionable route to continue making money" news at 11.

I'm not condoning Zoom's actions but this is hardly a problem unique to Zoom. Few if any businesses will stand up for consumers and citizens unless it's directly aligned with their profit motive. In this case, the business choice is to operate or not in mainland China. If they choose to stand up against the Chinese government they're going to have difficulty continuing to operate in China and risk losing that entire market.

Google played this PR game many years ago in China (rejecting some of the governmental policies) and ultimately caved to Chinese policies to do business there.

Businesses are not the organizations we should look to for empowering people, that's simply not their goal no matter how much their marketing team may want to sell that idea by following trending (popular) social movements that they've already done market studies on to assess potential fallback.

Re:Slack is down by tw04 on Monday January 04, 2021 @01:22PM (#25635614)
I think it's a pretty bold claim to state that Zoom's actions aren't unique.

What other business in this space has given China unfettered access to US users and data? I'm not aware of it occurring with Webex, Teams or go2meeting. The "one rogue employee" thing falls flat pretty quickly when they're the only ones that had this issue.

This feels like their encryption thing all over again, there's an "oversight" that is equivalent to a backdoor that only gets fixed when they get caught.

Re:Slack is down by Frost1x on Monday January 04, 2021 @01:29PM (#25635741)
I didn't realize they shared any user data outside China (misread the WP portion). It appears they did share 10 users' data which is a bit questionable but I'd hardly call that unfettered access to US data.

The fact is all of the US businesses operating in China give surveillance ability to the Chinese government for the Chinese users and are operating in an ethically questionable space being primarily based outside of China, at least in my opinion.

It's really not too different than the businesses sharing US citizen data to the US government, much of which Snowden and others before him exposed. I suspect there's a lot more surveillance going on everywhere than the general public know about and the businesses best positioned to do the surveillance are probably doing it.

Re:Slack is down by Havoc on Monday January 04, 2021 @01:07PM (#25635383)
And yet a surprising number of firms with sensitive info continue to use it. Law firms etc
Re:Slack is down by dylan604 on Monday January 04, 2021 @01:32PM (#25635800)
Is this an attempt to refute the claim using Zoom is bad, or an indictment against those still using it?
Re:Slack is down by xevrem on Monday January 04, 2021 @01:42PM (#25635965)
an indictment that so many people who should know better, still use a tainted and non-benign product.
Re:Slack is down by yabuttslivnwds on Monday January 04, 2021 @02:32PM (#25636662)
Elaine Chao’s sister is married to Xi, while Elaine, as transportation secretary under Trump, was busted inviting family with business ties to the CCP to official US government meetings.

The fear on this forum is imagined political thriller more than realistic.

Every technologist is grifting off the military industrial complex.

Re:Slack is down by schoolornot on Monday January 04, 2021 @02:21PM (#25636495)
The lesser of two evils and the product just works. They might have a few governance issues they need to fix. But at the end of the day, they signed a BAA with us and will take the liability and fallout of a breach.
Re:Slack is down by tehjoker on Monday January 04, 2021 @12:33PM (#25634821)
Imagine if they did that for the US government, which is easier to compel since they are in US territory.
Re:Slack is down by xibalba on Monday January 04, 2021 @01:08PM (#25635418)
One nation is currently operating concentration camps and arrests and seizes the property of prominent citizens who criticize the government. Are you sure that's an equivalence you want to draw.
Re:Slack is down by fhrifjr on Monday January 04, 2021 @01:20PM (#25635590)
Like Guantanamo Bay or prosecution of Assange for his journalistic work to expose wrongdoing of government? Or maybe you’re talking about for-profit prison system and mass incarceration practices? But you’re probably talking about China, right?
Re:Slack is down by bananabreakfast on Monday January 04, 2021 @01:41PM (#25635944)
Once again, that is a false equivalence.

No one imprisoned in Guantanamo Bay is a US Citizen and neither is Assange.

The US prison system is super fucked up but it is not the same as ethnic cleansing.

You are comparing apples to concentration camps.

Re:Slack is down by geocar on Monday January 04, 2021 @02:19PM (#25636479)
> No one imprisoned in Guantanamo Bay is a US Citizen and neither is Assange.

I think you should I know I -- and probably others, are reading this as "b-b-but, they're not US Citizens, so they don't deserve [the same] rights"

I hope that's not what you mean, because if it is, that's really fucked up.

Re:Slack is down by thereare5lights on Monday January 04, 2021 @02:29PM (#25636625)
That's exactly how I read it. And that's probably the same position of lots of Americans, which in and of itself is quite fucked up.
Re:Slack is down by dmkolobov on Monday January 04, 2021 @01:53PM (#25636109)
We have thousands of brown people in camps along the border, in brutal conditions, without access to healthcare(unless you count forced sterilizations as healthcare). Do you consider those to be apples as well?
Re:Slack is down by vorpalhex on Monday January 04, 2021 @02:09PM (#25636331)
That forced sterilization claim was entirely debunked and was misleading to start with:

https://www.channel4.com/news/factcheck/factcheck-were-mass-...

https://www.snopes.com/ap/2020/09/18/more-migrant-women-say-...

And 70% of those people in those camps are released within 30 days, often times within one week back to their country of origin (or given asylum).

Re:Slack is down by g00gler on Monday January 04, 2021 @02:59PM (#25637025)
Why are they in camps along the border? Why are the Uighur? Did the "brown people" break any laws? Did the Uighurs?

Are the "brown people" in camps along the border a single, ethnic minority? Are all "brown people" in the country subject to arrest and under surveillance just for being "brown"?

Re:Slack is down by dmkolobov on Monday January 04, 2021 @03:08PM (#25637143)
Well, yeah. People _are_ subject to arrest and surveillance for being brown/black in the US.
Re:Slack is down by Dylan16807 on Monday January 04, 2021 @06:29PM (#25639734)
Not really more surveillance than anyone else. And the discrimination and mistreatment for people in the US is bad but nothing compared to camps.
Re:Slack is down by throwawaygulf on Monday January 04, 2021 @03:55PM (#25637829)
No they aren't.
Re:Slack is down by thereare5lights on Monday January 04, 2021 @02:29PM (#25636618)
> No one imprisoned in Guantanamo Bay is a US Citizen and neither is Assange.

That's a glib retort.

A takeaway from your position is that it's ok so long as you do it to citizens of other countries.

> it is not the same as ethnic cleansing.

See the above.

That's always been the difference between the US and China and why so many countries have hatred for us and yet little to none for China. They don't fuck with other countries on the level that we do.

Re:Slack is down by jethro_tell on Monday January 04, 2021 @01:14PM (#25635492)
yes, I remember when I got my trump kidney from a poor anti-fascist liberal. /s

America is fucked up, that doesn't mean that other countries aren't also fucked up or aren't doing worse things with the data they collect.

Re:Slack is down by tehjoker on Monday January 04, 2021 @05:16PM (#25639023)
Yea, but you live here and so you should think about the implications of this for yourself and your countrymen and not through the lens of international competition. That is a distraction.

Essentially, the China case proved Zoom is willing to cooperate with a nation state. The US is the nation state we live in, Zoom is HQ'd here. Therefore, the risk to us is high.

As an aside, the organ harvesting idea comes from the Fulan Gong, who are similar to Chinese Scientologists. It is not clear to me that their claims are accurate.

Re:Slack is down by tehjoker on Monday January 04, 2021 @05:23PM (#25639105)
Yes. The Chinese state and the US state are both proven to spy on their citizens. For reference, see the heroic Edward Snowden's 2013 leaks.
Re:Slack is down by _6fmb on Monday January 04, 2021 @12:14PM (#25634409)
What an overwrought headline, the employee in question has already been fired.
Re:Slack is down by kemonocode on Monday January 04, 2021 @12:52PM (#25635144)
Sorry, but an executive is not just "an employee" and any alarms are rightfully justified. Took a little bit of cajoling in my company but we've successfully moved to self-hosted tools for the most part (Jitsi and Rocket.chat) with just a couple of projects with outside contractors using Slack.
Re:Slack is down by criley2 on Monday January 04, 2021 @12:24PM (#25634624)
It's weird that you describe the headline as "overwrought" and call the person an "employee" when the headline is more accurate than you.

This was an executive, not just an employee. That's a huge distinction and I can't help but think you intentionally downgraded his position to cover-up his behavior. "Just an employee" "Not a big deal"

But when you read the allegations, they seem like a very big deal that an executive was spying on users, giving their information to the Chinese government explicitly for oppressive purposes, including folks who are not in China, and went out of his way to personally censor non-Chinese groups meeting to discuss the Massacre-Which-Cannot-Be-Mentioned.

I would say the headline understates the gravity (it's very much a 'by-the-books' headline that you KNOW went through ten levels of Legal), and that your hand waving here feels much more dishonest than the headline.

Re:Slack is down by btown on Monday January 04, 2021 @12:35PM (#25634866)
Regardless of intent, it's undeniable that at some point there were insufficient controls to prevent this executive, or any executive in the future, from gaining this level of surveillance access.

And it's also undeniable that the consequences for Zoom (really, just needing to fire a few people, and not even the people who designed those controls if there were any) are so minimal that they have no incentive to strengthen those controls.

For some organizations (mine included) the benefits of Zoom outweigh the risks of Zoom having proven itself to not have those controls, namely the possibility of both political and corporate espionage. As with all things, YMMV.

Re:Slack is down by MattGaiser on Monday January 04, 2021 @12:28PM (#25634714)
Not only that, but this line stuck out to me.

> and other employees have been placed on administrative leave until the investigation is complete.

Zoom at least suspects he did not act alone.

Re:Slack is down by _6fmb on Monday January 04, 2021 @08:12PM (#25640666)
It was an executive purposefully brought in for legal compliance with that country's requirements. That he was fired is a huge signal in how seriously aggressive zoom is about protecting data that they would even be willing to go up against national governments. I feel like the firing is a huge part of the story.
Re:Slack is down by fermienrico on Monday January 04, 2021 @12:15PM (#25634438)
The optics are still very, very bad for Zoom. I have zero trust in them.
Re:Slack is down by noir_lord on Monday January 04, 2021 @12:29PM (#25634735)
There are remarkably few organisations I somewhat trust (even then on a sliding scale) but on that spectrum Zoom sits at the "wouldn't touch them with someone elses bargepole" end.
Re:Slack is down by alisonkisk on Monday January 04, 2021 @12:30PM (#25634746)
The company in question is still operating. We don't know if the employee was just a scapegoat.
Re:Slack is down by vorpalhex on Monday January 04, 2021 @12:25PM (#25634641)
Please reconsider using or supporting Zoom in any way. https://www.nytimes.com/2020/06/11/technology/zoom-china-tia...