1
Ask HN: If your company cares about security, why does it use Slack?
It's insane to me how many "security conscious" companies use Slack purely out of convenience.
The fact is, it's an enormous, centralized application written in PHP (not always a bad thing, but certainly not a language that keeps you from shooting yourself in the foot), with a massive target painted on its back.
How is it acceptable to you to use a chat solution hosted by a third party? Why not use an alternative you can host yourselves? It's just a matter of time before there's a huge incident.