Slack Not Using End-To-End Encryption Puts User’s Personal Data Under Threat

An online privacy watchdog has issued a stark warning about the risks of using the popular workplace chat app Slack. Gennie Gebhart, who serves as the associate director of research at the Electronic Frontier Foundation, outlined the threat of nation-state attacks using the troves of personal data that Slack stores. In an op-ed in the New York Times, Ms Gebhart cited Slack’s recent filing with the Securities and Exchange Commission, which highlighted threats from “sophisticated organised crime, nation-state, and nation-state supported actors”.  

However, Slack has comeback with their thoughts on security but the platform does not use end to end encryption.  


Expert Comments: 

Jake Moore, Cybersecurity Specialist at ESET:  

“Slack is a fantastic application trying to break people away from the downsides that accompany old fashioned email. But if it comes without end to end encryption as standard, this will no doubt put many people off from using the platform.    

Admittedly, many people don’t think or even care about encryption or place it on a priority list when it comes to data or messaging but in a world where privacy is increasingly becoming more popular, companies need to be thinking about enforcing encryption and privacy for all of their customers by default with no option to bypass it. Similarly, companies who don’t use 2FA by default also put their customers data at risk of having their confidential data viewed by anyone with the right knowhow and tools.” 

Experts Comments

Stay Tuned! Our Information Security Experts Community is responding .....

Submit Your Expert Comments

What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.
Be part of our growing Information Security Expert Community (1000+), please register here.

Write Your Expert Comments *
Your Registered Email *
Notification Email (If different from your registered email)
* By using this form you agree with the storage and handling of your data by this web site.