Slack Blog

Slack is an excellent product with a seemingly top-notch engineering team. But Slack has had multiple published security events the last couple of years. Including a DATABASE BREACH. E.g. someone either left a db open to the public, or didn't have ssh password auth disabled, or any number of no-brainer security practices. Again, no hate for Slack -- growing as fast as they have is an incredible feat. But heavybit is, um, pushing the definition of "secure" with that title. LOL. * https://slackhq.com/march-2015-security-incident-and-the-launch-of-two… * https://www.wired.com/2017/03/hack-brief-slack-bug-everyones-worst-off…

I'm sorry if this sounds snarky but a lot of your criticisms of slack so far just don't seem rooted in anything resembling the recency of development within the platform. https://slackhq.com/threaded-messaging-comes-to-slack-417ffba054bd Threaded conversations have been supported for a full year now, you have the ability to specify and narrow your searches down to specific rooms by using "in:#general" or by conversation by using "in:@dave", but a plain search will search as best the application can public rooms, private rooms and private messages, and the application does a great job I think telling you exactly where the search results come from, when they happened along with a contextual view of the conversation that happened before and after the search results-giving you the precise context of what was talked about, and allow you to both jump back in time to the moment the keyword appears, and jump back to "Now" very easily. https://slackhq.com/next-level-searching-in-slack-1ce56aa8adee Again, sorry if this sounds snarky, but I don't think your critiques are really lined up with how Slack has been developed in the last year. Many of your problems have been directly solved.

There is a cluster of related stories here. Many users seem to feel that the konklone.com post is the best representative of the set, so we changed to that from http://slackhq.com/post/103473448150/slacks-policy-update, and gave it a neutral title. We're working on a system for grouping related stories together, but don't know yet when it will be ready. In the meantime, we merge threads manually, and you have to fish through the comments looking for context (like what the previous url was, why it was changed, and so on). That's not great, but see the first sentence of this paragraph. There were a couple of borderline calls here: first, whether there are two significant stories that deserve to be on the front page, or just one (I'd argue just one, but it's not obvious); second, which of the two urls should be on the front page. Initially we chose the one that had been submitted earlier and had the larger discussion. Based on user feedback, we've flipped to the other. I'm marking this subthread off-topic now, so it doesn't stay at the top and make the thread be about HN story merging policy.

Same guys that on November 2nd, 2016, run a full page ad on the NYT [0], titled "Welcome, Microsoft, to the revolution", and signed "your friends at Slack". How ironic. [0]: https://slackhq.com/dear-microsoft

Slack's "Dear Microsoft" [0] letter in 2016 looks even sillier now. > Dear Microsoft, > Wow. Big news! Congratulations on today’s announcements. We’re genuinely excited to have some competition. Uh yeah, I don't think you are.. [0] https://slackhq.com/dear-microsoft#

> Didn't Slack rewrite their app to be native and move off of Electron? What are you talking about? That has never happened. They posted this blog post [1] on July 22, 2019 and you probably misunderstood their point. They did not rewrite the application to build on native libraries, they simply redesigned the architecture of their UI logic to draw web components only when strictly necessary, sharing states between workspaces and stuff like that, but it is —as of today May 19, 2020— still 100% a web application running on top of Electron. They recently announced another visual rewrite [2] on March 18, 2020 which also resulted in the same web application running on top of Electron, no changes in that part whatsoever. [1] https://slack.engineering/rebuilding-slack-on-the-desktop-308d6fe94ae4 [2] https://slackhq.com/simpler-more-organized-slack

This is https://slackhq.com/new-slack-features-invites-message-formatting right? Isn’t there an option to turn this off with the show formatting button? edit: oh nm i only noticed the ui, not that it totally broke typing

It looks pretty nice. What's the issue exactly? Reference: https://slackhq.com/new-slack-features-invites-message-formatting

Yeah it's been in Beta for like 2 years I guess. https://slackhq.com/introducing-shared-channels-where-you-can-work-wit…

Slack bought hipchat from Atlassian and shut it down. https://slackhq.com/atlassian-and-slack-partnership

They actually just fixed that in 4.0: https://slackhq.com/introducing-a-more-efficient-slack-desktop-experie… I'm currently sitting at 400MB total usage (including helpers) for 4 workspaces.

Yep, I misspoke -- I thought the other one had been pointing to the public announcement at https://slackhq.com/introducing-a-more-efficient-slack-desktop-experie… This is indeed a dupe.

The issue looks to be that they thought they had informed all the affected users back in 2015, but underestimated the set of affected users. The breach certainly wasn’t secret until today, they posted it publicly at that time: https://slackhq.com/march-2015-security-incident-and-the-launch-of-two…

Maybe this is more interesting than I initially thought. I was thinking this would just the encryption keys used to store the information for your whole organization Slack account. Instead, the keys seem to be much more granular, since you can revoke access to a single file, specific channel, workspace or organization level. [1] I see one benefit of this being able to securely throw away data. Like if you are doing work for customer XYZ and chatting about it on the corresponding channel you can throw away the keys for the channel when the project ends. Wonder how all this granularity works together with the search functionality. Or maybe they maintain per channel search index that can be covered by a separate key. [1] https://slackhq.com/enterprise-key-management

According to Slack, because it looked better on more backgrounds: https://slackhq.com/say-hello-new-logo

This is from their official blog. https://slackhq.com/say-hello-new-logo

I think if you ask Slack about that they'll happily tell you about Slack Grid. EDIT: Whoops actually Shared Channels is the feature I was thinking of: https://slackhq.com/introducing-shared-channels-where-you-can-work-wit…

Their official post says they are working on a transition path: https://slackhq.com/atlassian-and-slack-partnership

The internet suggests that the official desktop/web client is not particularly usable with a screen reader: https://www.marcozehe.de/2016/01/16/status-of-the-accessibility-of-sla… https://slackhq.com/designing-slack-for-everyone-456002920bf2 (talks mostly about the mobile clients, which were designed later) Maybe this has changed recently?

Here's what I'm talking about: https://slackhq.com/threaded-messaging-comes-to-slack-417ffba054bd?gi=… > Even if it is there, the affordances of the UI[1] don't seem to encourage this style of conversation. I agree. I never use the feature personally.

There is a way for each individual to pay for their Slack account: Shared Channels! https://slackhq.com/introducing-shared-channels-where-you-can-work-wit…

This should cover guest members for you: https://slackhq.com/new-improved-ways-to-manage-guest-accounts-in-slac…

That other thread's link was changed from: https://slackhq.com/dear-microsoft-8d20965d2849

It is probably because of the $80M fund (http://slackhq.com/post/134878632730/launch-platform) Slack set up for developing apps on their platform.

Got a source for that? I've taken a quick look and can't find anything mentioning these before late 2015. Slack's blog post was in July (http://slackhq.com/post/123561085920/reactions)

http://slackhq.com/post/128721741660/inclusion-and-diversity-at-slack Slack posted demographics for every category except for race and management. I hope it's an oversight.

Isn't this what you were looking for: http://slackhq.com/post/126629257535/email ?

Slack does this natively now for paid accounts: http://slackhq.com/post/126629257535/email

Just PR content, too little, too late. now wait and watch if someone will dump this on pastebin or some torrent. compare it with what slack posted under similar scenario http://slackhq.com/post/114696167740/march-2015-security-incident-and-…

In case you hadn't seen yet, I suspect everybody at Slack in a position to comment on the company's behalf in pubilc is probably kinda busy with more pressing matters right now: http://slackhq.com/post/114696167740/march-2015-security-incident-and-… (And I can't help but wonder if these two issues aren't connected somehow. Someone may have been sitting on a 0day trying to do the right thing in expectation of a bug bounty program reward, only to discover exploiting or selling it was the only avenue likely to actually pay out... Surely this isn't just coincidental timing?)