3 ms·

Because when you host it yourself, it can be off of the public internet.

by misterrobot 9y ago

masom 9y ago
That's not very useful for your CEO/CTO/CFO/sales/etc when they are offsite or traveling.
- KekDemaga 9y ago
  A VPN resolves this issue and provides encryption and authentication.
  - actsasbuffoon 9y ago
    A VPN is non-trivial to set up correctly. Have you set up an internal DNS to prevent leaking the domains from requests? How about IPv6 leaks? There are many things to consider, and I wouldn't trust a random programmer to do it correctly.
    - theossuary 9y ago
      I wouldn't trust your programmer much at all if they couldn't configure OpenVPN with correct DNS settings, given some time.
      - KekDemaga 9y ago
        Many good resources exist: https://www.linode.com/docs/networking/vpn/set-up-a-hardened-openvpn-server https://www.linode.com/docs/networking/vpn/set-up-a-hardened...
sgehly 9y ago
and what about if your network is compromised? For most small-medium businesses, that's more likely than Slack being compromised.
- linkregister 9y ago
  Slack already had a public compromise. Most small businesses haven't been publicly compromised. I'm not saying it's safer to self-host. There are a ton of foot-guns with operating your own IRC server.
  - sgehly 9y ago
    It mostly depends on if you're a target. I must have missed when Slack was compromised, but I'm willing to take the risk of Slack being hacked, as I'm not a target. Im a fan of the methodology that bigger company = more secure, although that's obviously not always the case.
  - fao_ 9y ago
    That said, you bypass a ton of those foot-guns if you just stick everything behind a corporate VPN with 2FA and the appropriate security. As long as the VPN is secure, everything behind it is secure.
- fweespeech 9y ago
  > and what about if your network is compromised? For most small-medium businesses, that's more likely than Slack being compromised. If your network and/or workstations are compromised, it is _over anyway_ because they have all your data. This is one of those situations where you are saying "What if they decapitated me? Slack might still be secure." I mean, technically, you are correct but it isn't relevant because you are dead. If you think such a business can survive a pentest from an employee workstation...XD

Because when you host it yourself, it can be off of the public internet.

masom 9y ago

That's not very useful for your CEO/CTO/CFO/sales/etc when they are offsite or traveling.

KekDemaga 9y ago
A VPN resolves this issue and provides encryption and authentication.
- actsasbuffoon 9y ago
  A VPN is non-trivial to set up correctly. Have you set up an internal DNS to prevent leaking the domains from requests? How about IPv6 leaks? There are many things to consider, and I wouldn't trust a random programmer to do it correctly.
  - theossuary 9y ago
    I wouldn't trust your programmer much at all if they couldn't configure OpenVPN with correct DNS settings, given some time.
    - KekDemaga 9y ago
      Many good resources exist: https://www.linode.com/docs/networking/vpn/set-up-a-hardened-openvpn-server https://www.linode.com/docs/networking/vpn/set-up-a-hardened...

sgehly 9y ago

and what about if your network is compromised? For most small-medium businesses, that's more likely than Slack being compromised.

linkregister 9y ago
Slack already had a public compromise. Most small businesses haven't been publicly compromised. I'm not saying it's safer to self-host. There are a ton of foot-guns with operating your own IRC server.
- sgehly 9y ago
  It mostly depends on if you're a target. I must have missed when Slack was compromised, but I'm willing to take the risk of Slack being hacked, as I'm not a target. Im a fan of the methodology that bigger company = more secure, although that's obviously not always the case.
- fao_ 9y ago
  That said, you bypass a ton of those foot-guns if you just stick everything behind a corporate VPN with 2FA and the appropriate security. As long as the VPN is secure, everything behind it is secure.
fweespeech 9y ago
> and what about if your network is compromised? For most small-medium businesses, that's more likely than Slack being compromised. If your network and/or workstations are compromised, it is _over anyway_ because they have all your data. This is one of those situations where you are saying "What if they decapitated me? Slack might still be secure." I mean, technically, you are correct but it isn't relevant because you are dead. If you think such a business can survive a pentest from an employee workstation...XD