3 ms·
but the article does not demonstrate that that would work in practice...
by fsndz 2y ago
but the article does not demonstrate that that would work in practice...
- simonw 2y agoThe article says this: “Although we did not test for this functionality explicitly as the testing was conducted prior to August 14th, we believe this attack scenario is highly likely given the functionality observed prior to August 14th.”
- fsndz 2y agoa belief is not the truth
- simonw 2y agoSo they shouldn’t have published what they’ve discovered so far?
- fsndz 2y agoI think it was great that they contacted Slack the way they did. It's also okay for me to publish. I just don't think it deserves much fanfare; in my opinion, this isn't a huge or serious vulnerability, that's all.