It allows anyone using a particular email domain to see all the teams that have enabled the self-signup process for that domain. This is a setting that the team owner and administrators control.
Many people who use Slack have team discovery via email domain enabled. The ability to view team names that relate to a particular team’s email domain or individual’s email address is a feature designed to make it easy for our users to find and access teams. There has been a good deal of confusion about this and we’d like to clarify.
We understand that there is concern that people attempting to sign in to a Slack team were able to see all the teams associated with a particular email domain, even when the user was unauthenticated. Here is Slack’s statement in its entirety on the subject: That is, if those team admins aren’t already aware of the issue thanks to all the news about it. That doesn’t seem like a quick fix, however, and In the meantime the company says it will be reaching out to clients to clarify settings and how they affect whether or not team names are visible to unauthenticated users. The company said that the change will make team names no longer visible when a user signs in, while it overhauls the entire sign-in process.
UPDATE: Slack has since updated sign-in on desktop, and says a change is also in the works for its mobile apps, which it hopes to have live over the coming weeks. As a result, it’s looking to refine that process to streamline onboarding, as well as adding features like single sign-on to address other issues. In the statement, Slack acknowledged that as companies have added more and more teams, the sign-in process has become more cumbersome anyway. That’s not to say the company doesn’t realize there’s a problem with its sign-on process. While it might have resulted in fewer employees immediately signing up for teams if they needed to be invited, the unintended consequence of exposing top-secret projects is probably a much bigger issue for its customers. That might be the case, but it’s silly to blame users for a setting that probably should have been turned off by default. It can also be set so that users can join by invitation only, which Slack says will not make team names visible to all. In a statement, the company points out that team discoverability via email domain is a setting team owners and administrators can control. Slack says the visibility of those team names was not entirely its fault. That’s great for creating a fast onboarding workflow for users, but not so great when any random person can spoof an email address at a company’s domain and have unauthenticated access to a list of teams. Usually that would be a good thing, except that different projects those companies are working on might have been exposed thanks to a “feature” that makes team names visible to unauthenticated users.Įarlier, the feature in question allowed anyone to sign up using any random email address at a specific domain, and then prompts them to select teams that are available at their company. If you aren’t following these House Rules, and are making it difficult to create an awesome product management community, you will be asked to leave.Slack is one of the hottest startups out there right now, after having won over a wide range of tech companies with its enterprise collaboration tool. Posting in multiple channels won’t get you more responses – just more upset community members. The channels are there for a reason – to allow our audience to choose what they want to see – so pick the most appropriate one (almost never #general) and only post your message there. When posting pick one channel – don’t post the same thing across multiple channels. We’re a community for product people to share what they know and hone their craft. We have zero tolerance for spam either in slack or via email addresses scraped from slack, and we will never sell or share your email addresses to anyone. We’re super friendly, and we promise to help you any way we can. No problem – just ask an admin via private message (if in doubt, talk to Barritt). If you wrote or are organising something that’s relevant to the current discussion in some other channel, then add to the conversation and explain why it’s interesting. If you’ve written an awesome blog post, we’d love to see it in the #freshcontent channel. Rather than post jobs directly to Slack, post them on, and we’ll promote them *everywhere*, including Slack 4. This is a great place to hire product people If you disagree with someone – that’s good!ĭiscussions and debates are what make this community awesome! Keep it civil and avoid personal attacks, and we’ll all get along just fine. There is zero tolerance of toxic, destructive behaviour. If someone is doing something you don’t understand or agree with, give them the benefit of the doubt and talk it over.
0 kommentar(er)
