5 ms·
Is Slack really the right place for security-critical notifications?
by _yy 11y ago
Is Slack really the right place for security-critical notifications?
- Klathmon 11y agoyes? I mean the next step is to have an automated phone call go out to people (which is what we do for critical alerts). Short of that, slack is on my desktop, laptop, and phone. If i don't have one of those around me at the time, you aren't getting ahold of me for any reason. So yeah i think it's perfectly valid for security-critical notifications. Plus this isn't as security critical as you'd think. I don't want klaxons going off every time someone sshs into a server... This can just be an additional layer of security.
- plasticxme 11y agoSlack is terrible for auditing, though. What's wrong with email?
- RubyPinch 11y agopeople are more likely to be looking at chat windows as opposed to emails
- Tepix 11y agoNot in my book. Slack seems to be really cool but since it's not self-hosted and owned by a US entity, I'll stay clear.
- pc86 11y agoIt's an ssh login notification with a user and IP address. It's not notifying everyone what the new launch codes are. Let's not overstate it.
- deleted 11y ago[deleted]
- Tepix 11y agoI'm not referring to the SSH logging, I mean slack in general.
- pavel_lishin 11y agoWhat would you use instead?
- melicerte 11y agoMattermost
- ex3ndr 11y agoor Actor.im
- falcolas 11y agoIRC on a server I control, or some slack clone with on-premise hosting. Call me paranoid, but I'm paranoid.
- placeybordeaux 11y agoI still don't understand why everyone is so excited about slack, it really doesn't offer that much more than IRC.
- ryanlol 11y agoIt offers marketing and support, that's about it. Nobody is selling IRC.
- HeadlessChild 11y agoWe just discovered that some developers at my workplace use their domain user account credentials for Slack as well. My manager was not happy.
- random_rr 11y agoAre you asking if a communication platform is a good place for communications? Yes.