3 ms·
If they are just deleting accounts where someone logged in from a treasury-barred country’s IP, I wonder what happens if you BGP hijack a small amount of that a
by rdl 8y ago
If they are just deleting accounts where someone logged in from a treasury-barred country’s IP, I wonder what happens if you BGP hijack a small amount of that address space, somehow get admins or high profile users to connect via this (run WiFi? Some kind of proxy?), and then observe the chaos.
- wolf550e 8y ago(I was wrong)
- detaro 8y agoHe said having been to Iran and maybe having used app a few months ago might have triggered it.
- samstave 8y agoOr if a data breach allows for account data to be stolen, then one can spoof access attempts from such IPs and seek to DOS the account access. If the removals are automated, then the most vulnerable accounts would be those of slack employees - or slack investors?
- true_religion 8y agoI don't think it's an access attempt that matters but actual access. You need to login via the API, not simply try and fail to get access.