Sign in / up

back to article Slack quick to whack account hijack crack

Slack quickly squashed a potential account hijack bug hours after it was reported. Frans Rosén, a security researcher at Detectify, discovered a vulnerability in Slack that created a means for a malicious website to steal a user's Slack token, potentially seizing control of their account in the process. Slack fixed the bug in …

COMMENTS

Post your comment
House rules Send corrections
Add to 'My topics' unstar *
  1. MrT

    it's good to hear...

    ...when a company gets it. This sort of thing needs an award of some sort, as an antidote to all the 'up yours' responses and "we take security very seriously" empty canned statements from leaky megacorps.

    Design idea for the award - an exclamation mark, in purple...

    4 0 Reply
  2. NoneSuch Silver badge
    Thumb Up

    An extra months pay would motivate some and save the company many times that.

    1 0 Reply

POST COMMENT House rules

Not a member of The Register? Create a new account here.

Forgotten password ?

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like