3 ms·
This would be perfect opportunity for some enterprising gray or blackhats to wreak havoc. We know people reuse passwords. I'm sure there are a lot of weak acco
by bostik 8y ago
This would be perfect opportunity for some enterprising gray or blackhats to wreak havoc.
We know people reuse passwords. I'm sure there are a lot of weak accounts known, or at least suspected. So... if you had a large number of compromised slack accounts, and a complete lack of morals, you could log in with each of them to Slack through Iranian/Syrian proxies.
If Slack are indeed shutting down all accounts that have ever logged in from Iran or Syria, the above could be a brutal denial of service. Followed by a massive PR s##tstorm.
Disclaimer: I don't advocate doing anything like that. I just point out that there might be a way to weaponise the backfire...