Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The site seems to be down at the moment.

Here is a cached version [1]

The gist of it: the slack mac client seems to ask you for your groups before properly authenticating you - hence if you put in the email address of a competitor (or famous person), you can see which groups they belong to, which might be valuable information.

(haven't tried it myself, just summarising the post)

[1] http://cc.bingj.com/cache.aspx?q=http%3a%2f%2fwww.tanay.co.i...



1) The slack web sign up seems affected too

2) Any email address, valid or not with a valid domain name works




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: