851
Living Room / Re: 23rd Century here we come
« Last post by KynloStephen66515 on March 27, 2015, 04:59 PM »o.O
March 2015 Security Incident and the Launch of Two Factor Authentication
Posted March 27th, 2015
We were recently able to confirm that there was unauthorized access to a Slack database storing user profile information. We have since blocked this unauthorized access and made additional changes to our technical infrastructure to prevent future incidents. We have also released two factor authentication and we strongly encourage all users to enable this security feature.
We are very aware that our service is essential to many teams. Earning your trust through the operation of a secure service will always be our highest priority. We deeply regret this incident and apologize to you, and to everyone who relies on Slack, for the inconvenience.
Here is some specific information we can share about this incident:
Slack maintains a central user database which includes user names, email addresses, and one-way encrypted (“hashed”) passwords. In addition, this database contains information that users may have optionally added to their profiles such as phone number and Skype ID.
Information contained in this user database was accessible to the hackers during this incident.
We have no indication that the hackers were able to decrypt stored passwords, as Slack uses a one-way encryption technique called hashing.
Slack’s hashing function is bcrypt with a randomly generated salt per-password which makes it computationally infeasible that your password could be recreated from the hashed form.
Our investigation, which remains ongoing, has revealed that this unauthorized access took place during a period of approximately 4 days in February. As soon as the evidence was uncovered, we started communication with the affected teams. The announcement was made as soon as we could confirm the details and as fast as we could type.
No financial or payment information was accessed or compromised in this attack.
I still say spam:
Date Registered: March 25, 2015, 12:14:23 AM
Last Active: March 25, 2015, 12:22:46 AM
He registered, posted this, then left...typical of a spammer.-Stephen66515 (March 26, 2015, 09:07 AM)
The reason that I wouldn't have a knee jerk reaction in the other direction of spam is the fact that there are countless others who have done the same thing- most of them just say your software sucks! Or why is this so hard? And never come back. Though the way in which it is posed is a bit rude, it still is good for rumination.-wraith808 (March 26, 2015, 09:50 AM)
pretty-software.com does the same as Find and Run Robot and it is really free-cyberdoc999 (March 25, 2015, 12:22 AM)
When I first noticed that Automation was in development, I thought ‘here goes another build-your-own car game where reality and basic engineering principles don’t exist. Oh well, I’ll keep my eye on it.’ I downloaded the demo, and curiosity eventually got the best of me. I contacted the developers who kindly supplied a copy of the full game under the condition that I wouldn't reveal anything until it went to early release on Steam. As I began exploring the game, my desk became the epicentre of a massive facepalm storm. What is wrong with me? Why did I let other games destroy my faith? Why didn’t I get my hands on this game sooner?
This looks beyond awesome!...We are just talking about that in #donationcoder-Stephen66515 (February 02, 2015, 04:57 PM)
Cool! - I'll cross reference it in my OP above and direct people there to keep it all in one place.-40hz (February 02, 2015, 07:14 PM)