Slack’s new DM feature can be used to send abuse and harassment with just an invite

[The Verge RSS]

Author: Nick Statt

Photo by Amelia Holowaty Krales / The Verge

Slack’s newest direct message feature, part of a broader cross-organizational tool called Slack Connect, lets anyone with a professional Slack account DM another user so long as they have their email address. These messages, which are attached to invites, can be potentially abusive or harmful, points out Menotti Minutillo, a Twitter product employee who works on the company’s developer platform trust team.

There’s no way to block these invites, either. You could also trick someone into accepting your invite and then send them harassment or abusive messages.

well that was easy as shit to abuse

- send invite with nasty language
- slack emails you w/ the full content of the invite
- can't block the emails because they come from a generic...

Continue reading…

Continue reading...