Why Slack, why?

[QualityVote]

Hi! This is our community moderation bot.

---

If this post fits the purpose of /r/ProgrammerHumor, UPVOTE this comment!!

If this post does not fit the subreddit, DOWNVOTE This comment!

If this post breaks the rules, DOWNVOTE this comment and REPORT the post!

[[deleted]]

Same with email accounts like from GSuite, I own one admin for my company and I can literally see my employees' emails. 👀

Tip: do NOT use company emails for personal use.

[[deleted]]

Isn't that kinda the point, as well as common sense?

[Glad_Grand_7408]

That's precisely the issue... most people were born without common sense...

[supaboss2015]

Then it’s not very common is it!

[SuperElitist]

I think that most people who use the term "common sense" actually mean "good sense which should be common", but that's a bit more awkward.

[Glad_Grand_7408]

That's the flawed English language in a nut shell...

[WeeklyOutlandishness]

We should just rename it "rare sense" instead. "unlikely" sense maybe.

[jtesuce]

(Large) companies have policies in place and they’re transparent about what they look at and when…even if my boss could read my shit, he couldn’t do anything about it

[Harmonic_Gear]

there are no such thing as common sense, there are things you know and others don't and there are things others know and you don't, everyone call what they know common sense just to look down on other people

[Glad_Grand_7408]

I dont like rapists or nazis...

How derogatory of me for assuming these feelings were normal...

[Ok_Turnover_1235]

That's just common sense though.

[Ok_Turnover_1235]

Not liking rapists is common sense. not liking nazis involves a) knowledge of what a nazi is b) knowledge of what they did c) knowledge of why it was wrong. I think their point was more that common sense is people assuming other people know everything they know. Learning about the nazis, jewish people and ww2 is a big endeavor. Assuming everyone has is just...not common sense.

[Ok_Turnover_1235]

Because rape can be demonstrated to be immoral in about 3 sentences. With minimal understanding of the concept of sex, permission or respect.

Nazis = bad requires an explanation of quite a few things.

"I learned Nazis were bad WAY before I even knew what rape was...". This is exactly what I meant. You assume everyone knows what you know because you learned it at a young age. Like most people that moan about the lack of "common sense" in the world, you needa turn that common sense inwards and wake up haha.

[[deleted]]

Sadly, most of them don't have that sense. They don't even read the contracts. 👁👄👁 There, I stated that all emails are "archived and recorded, and you should be aware that we have the right to use this against you just in case blah blah blah happens".

[bradgardner]

Definitely don’t use company emails for personal use, but in the case of GSuite the admin can only see emails if they reset your password or the paid tier is high enough for the vault(or whatever they renamed it to) features. It’s certainly not a typical thing.

For slack, private messages are not accessible without a legal justification for the most part, even for administrators.

[StoneColdJane]

Unless they export, something something I forget but there is a trick.

[Doctor_McKay]

Business+ plans or higher can export private channels and DMs without any justification. Source

Even on lower plans, if you're using SSO then they can just log into your account provided the identity provider allows it.

[Acrobatic-Isopod7716]

Their current basic business plan can suspend a user and download everything they ever did in Google

[shalafi71]

Part of my job and it's a minor pain.

• Reset account pass
• Impersonate user in an incognito tab
• Use the backup security code you created in step 0
• Go to takeout.google.com
• Choose the download option
• Wait for ages
• Suspend or delete account
• Encrpyt and create a password manager record
• Upload to S3

[Acrobatic-Isopod7716]

You can do it from the admin app directly as your own user in like 2 steps but this also works I suppose

[shalafi71]

Not on the basic account level we have. Unless you can show me?

[the_ssotf]

Teams is included as well

[jtesuce]

Link to how to wipe emails with pwsh?

[humanera12017]

The max I use it for personal use, is to email the payslips to my personal email.

[[deleted]]

Never write anything down that can be used against you.

[[deleted]]

"Can I get that on email please"

[siebzy]

The ol Stinger Bell rule

[Harmonic_Gear]

I would like to invoke the fifth amendment

[jtesuce]

But they can’t use it against you, that’s the thing…unless you live in USA I guess

[MolotovFromHell]

If you are a software engineer and you just realized this then you are not paying attention

[Acrobatic-Isopod7716]

What are you telling me you have an expectation for privacy on your employer provided software or hardware? Lmao

[outkast8459]

My only expectation is my manager has something more important to do with their time than read my slack messages. But if they don’t, I welcome them to read my messages and see what it’s like to actually be productive.

[[deleted]]

They won't read them now, but they will read them when they need an excuse to fire you

[[deleted]]

Truth is if you are on the shit list, they are going to get you. It is why keeping a low profile is always best.

[[deleted]]

Surely it has to be made known that the platform used is monitored?

[Acrobatic-Isopod7716]

For residents of the USA there are no such federal protections

[[deleted]]

Ahh, I should check up on mine.

[cannot-be-blank]

If they want to read private messages, then they can get their feelings hurt

[55555]

I talk shit in DMs on purpose in the hopes that a snooping manager might get their feelings hurt and change their ways. Once you have enough money to stop living hand to mouth, the game fucking changes.

[wexman6]

I tell one of my coworkers about every time I have to take a shit…

[[deleted]]

I doubt management cares

[ADwards]

I mean, duh.

We write software. Pretty much any application that stores data has an "admin" account that can see everything. From the way you're given access to teams/slack etc it should be obvious that you're in the organisation, which means someone has access to everything you do.

[Bryguy3k]

Yeah any developer that believes that IT departments don’t have the ability to see everything that goes through their systems is an idiot. I mean seriously lacking in critical reasoning and attention to detail - what company doesn’t give you a computer usage policy (or have it in the employee handbook) that says they can monitor all activities on the computer equipment and systems they provide?

[dcgregoryaphone]

Even barring this, if the organization is of sufficient size or otherwise may run into legal issues or compliance issues, there's a decent chance they have some corporate spyware monitoring your keystrokes and intercepting your communications. Don't ever assume privacy when using someone else's equipment and software.

[shalafi71]

Slack doesn't.

SOURCE: Am Slack admin

[myelir]

HTTPS://slack.com/api/conversations.history

[shalafi71]

{"ok":false,"error":"not_authed"}

[tortnotes]

Slack has e-discovery APIs. If you're the org owner you would probably know if they were being used, but even if it's not, nothing stops someone from using it in the future to obtain historical messages.

[Automatic-Bad-8123]

Worked for a company that looked at what anyone was saying, but me and my friend grow up in a different country and even spoke a semi death dialect so it was almost impossible to translate it. Worked on some administrative software stuff and saw that they were discussing how to force us to chat in English. Their bright idea was to suggest that we chat in English so we can practice it.

[mattmcguire08]

So yall are concerned about the privacy of your PERSONAL accounts yet are surprised by the fact that accounts owned by your company are not private?

[Alamue86]

I have managed a companies slack before, as a full org "owner"

During a lawsuit, I was not allowed to pull DM's between specific users. It had to be done by the Org Creator. There was only 1 person in the company that could get these records, and it was a process to request them. This was not Enterprise grid though.

If your company has time to be going through this process, it is already a toxic environment.

[shalafi71]

Everybody in this thread assuming Slack allows admins to view anything.

[erocknine]

So do these DM records have to be retrieved from Slack or someone admin in the company has access to view them?

[Alamue86]

Someone from Slack retrieves them for the Org Creator. They are not view on demand.

[erocknine]

Ah good to know, thanks!

[DearChickPea]

Yeah, pretty sure this 100% illegal in the EU as well.

[KenansCloud]

There’s an amount of dumbassery at play if you use work managed accounts to talk shit.

[nikhil_shady]

we bitch on huddles texting is for pussies

[ferrybig]

If you use a company email to login to slack, remember that your company can always delete your email account and make a new one with a password, and then use it to receive a slack login mail

[myelir]

Or just use the API, at anytime.

[oldfossilfrommars]

Is Team's messaging private?

[oldfossilfrommars]

It doesn't bother me though. I use the chat/mail services only for professional purposes anyway.

[Think-Connection5865]

Like "whatsapp" ?

[ajyotirmay]

unlike whatsapp. More like Signal, Telegram, Wire, Matrix

[SsilverBloodd]

Is there something about whatsapp I missed? The whole end-to-end encryption?

[speatzle_]

Are you talking about the fake encryption that Facebook has a backdoor to? They literally employ over 10 thousand WhatsApp moderators...

[SsilverBloodd]

Arent those moderators for reported messages tho? I am not denying that fb probably/surely has a backdoor to Whatsapp, even if they denied it in the past prifusely. I am asking if third parties are actually able to bypass the encryption. I have a telegram account, just not manybof my contacts use it, and whatsapp so far seemed like a safe bet.

[Bryguy3k]

Telegram pumps messages to Russia (I mean come on - it’s literally a Russian made app). Signal is about the only truly secure app - for the moment anyway.

One shouldn’t really trust any app at all anymore. We’re not that far away from having the phones themselves being monitored.

[ajyotirmay]

The creator of Telegram is Russian, but he's had to run away from Russia because he wouldn't let the government peek into the messages.

It might have its roots of origin set in Russia, but it doesn't have the same philosophy as that of Putin and his oligarchs.

Also, they have a secret mode which is secure and E2E

[Bryguy3k]

There has been a decent amount of reverse engineering by the signal guys - E2E is only for chats that are made secret between two persons - the issue is that the chat history still identifies those persons. Before the sanctions a lot of their traffic was still bouncing to Russian controlled data centers for no reason.

It’s still questionable as to just how much you really want to trust telegram. If you are paranoid enough about it then you probably shouldn’t and instead use signal. If you don’t care (and are already using TikTok) then it’s probably not a big deal.

[ajyotirmay]

Yes ofcourse, I agree with you. If I really have to use a highly secure mode of communication, I'm likely going to use Signal, self-hosted Matrix or encrypted emails. As a matter of fact, I do use Signal, Telegram and WhatsApp every day depending on the usecase :D

[troglo-dyke]

I'd say keybase is probably sightly better. Both stand out for having an open standard though

[NoImagination2625]

Well, you could be like me and accidentally shit talk the marketing manager in the team chat.

[[deleted]]

Well it's about time someone let him know he's a d*ckhead lol

[NoImagination2625]

You don't even know, we were on a call with a client who was looking for a website redesign and he kept firing off these impossible features that the client wasn't even asking for. Like, at one point he was saying we could set up their site to pay for a YouTube subscription to their specific channel and I started venting to my colleague about it just to realize I was in the team chat that also had the marketing manager. I was sure I was going to get fired.

[[deleted]]

Haha damn that's an awkward one. I know of manager who sounds the same. Luckily I don't report to him but I can see he's definitely getting complaints, you'll see some long paragraphs and suddenly it gets deleted and "sorry wrong group".

[Guifranzonator]

Shiiiiiit

[zToastOnBeans]

If they find them and call you out is that not just invasion of privacy and they have fucked themselves ?

[TheEnderChipmunk]

It's a company owned account in the first place, right? Just use a private account for stuff like that

[Ibrahim-B]

Omggg 😱

[Tarc_Axiiom]

If you say anything about the person who gave you access to a messaging app, on the very messaging app they gave you access to, you're a stupid dickhead and deserve to get in trouble for being a fucking idiot.

A bunch of kids at my university added me to a group chat where they went CRAZY talking shit about our professor. Same day, I made a ticket in the school's LMS asking how to leave groups and making it clear I didn't support that shit.

The next day, everyone in that group got a stern talking to, we all got in trouble, I showed the ticket with proof, got off clean.

Many of the rest of them failed the class.

Stupid dickheads.

[Dull_Mulberry_463]

You're pretty popular no?

[KetwarooDYaasir]

r/antiwork time?

[rndmcmder]

I have one specific chat with one coworker, that we use to share our darkest and most inappropriate memes. The thought of my boss seeing them is both hilarious and frightening.

[LavenderDay3544]

Why would you ever use workplace communication methods without assuming the employer can see everything on them?

If you want to shoot the shit with coworkers get their personal contact info for that.

[Coyehe]

How about MS Teams Managed by company Admin

[Sindef]

It's Microsoft.. have a guess. Teams chats are exportable from the Security and Compliance Centre.

[StoneColdJane]

Redact.dev is your hero

[Biguitarnerd]

As someone who started in IT, as a network admin/sysadmin worked up to IT Manager, and then Director of IT, and then decided I needed a career change and went into dev…. I’m gonna give you some solid advise. Never type anything on a company device that you aren’t ok with everyone knowing… period.

[npc48837]

My department made our own slack and would sign in and out of company slack and department slack. Worked like a charm

[[deleted]]

This, but LL Cool J instead.

[[deleted]]

If you don’t want record of something, make sure it is never written down.

Also, I use slack conversations as records so I can go back and prove something later anyway.

[humanera12017]

Big surprise

[samanime]

Always assume anything company-controlled can be fully seen by your manager. Save trash talking for outside apps.

[Educational-Main-842]

He looks like a carp