Hacker News new | ask | show | jobs
by paxy 3192 days ago
They don't really address the fact that every single Slack "leak" is from someone already part of the team taking screenshots of the conversation. How does any kind of encryption help that?

Also doesn't mention everything you lose out on with this approach - like searching through message history.

It's a neat product I guess, but mentioning Slack in every single line seems more to get eyeballs than a valid comparison.

4 comments

If you can't trust all the members of the team, or the person you send the message to, then no amount of encryption will save you.

But this does remove (reduce?) the need to trust that the the 3rd party provider (eg. Slack) is capable of securing your data and is also protecting it from the prying eyes of those you don't choose to trust explicitly.

Why can't you just store the chat data locally and search it there? Chat data is already small enough, it just needs to be stored in a searchable format.

You don't need to store all of it either, just store the past month or so (or store what the user chooses to store). When the user needs data in the past, the user can download that data from the dates needed.

I have IRC logs with years worth of chat data and they only take up a few MBs.

Search could be done locally if the client downloads the whole message history. I don't know enough about how Teams works to know if that's actually something a client can do right now, but it should at least be technically possible.

Another alternative is simply running a bot that indexes everything and provides search. You can run the bot in-house so you keep control over your data.

I think I'm more uncomfortable with the idea of entire message histories walking around on disks of laptops and phones (not to mention that's a giant problem on phones because of storage/horsepower) than I am with the idea of slack being able to read everything...
Well, the clients could just keep indexes rather than the actual history, and then fetch the specific messages as needed when the search is performed.
There are better ways to do search, hash keywords then you can just search the hashes
> like searching through message history

You can do this[0]

I'm personally rooting for them - e2ee group chat is a common request I get

[0] https://people.eecs.berkeley.edu/~dawnsong/papers/se.pdf

What is e2ee; everyone to everyone else?

What does that mean, if so..

I'm guessing "end to end encrypted".
/r/iamanidiot