[DanBlake]

Technically this was possible before this.

Since the email to each slack user is an @company.com address all you need to do is take control of the employees email address, reset the slack password and login as the target user.

[reustle]

> Since the email to each slack user is an @company.com address

Not necessarily

[gburt]

It turns out administrators could change the email address anyway. :)

[vuln]

Right?

[heedlessly2]

for most companies slack channel, you would need the @company.com to get approved for slack access.

Very rare and unprofessional to allow someone's personal email access