Slack reveals intrusion, adds extra security options to accounts
Work-focused messaging service Slack has increased the security of its accounts, following an intrusion to company servers. The company admits on its blog that its servers were accessed by unauthorized users over a four day period in February, and though it only revealed the intrusion on Friday, it claims to have been working hard on improving the service's overall security.
According to the blog, the central database was the target of the hack, with user details including user names, email addresses, "one-way encrypted" passwords, and any optional information added to the profile, including phone numbers and a Skype ID. The company took the extra step of revealing it used bcrypt with a randomly-generated salt per-password for the hash, making it "computationally infeasible" to break. Financial and payment information is apparently safe, neither accessed nor compromised during the attack.
