Hacker News new | ask | show | jobs
by ceejayoz 982 days ago
That's similarly bad, though, at times.

If I search "Draft performance improvement plan for ceejayoz" and a document I don't have access to comes back, that's a fairly significant data leak.

2 comments

Except that’s not how it works. Your search results only include the documents you have access to.
Disclaimer that I work at Slack.

The search you experience runs against permissions so something like that doesn't happen.

> Disclaimer that I work at Slack.

I suppose by this you mean that you do work at Slack, but that's not really a disclaimer, is it? More of a "claimer".

The proper word here is "disclosure" not "disclaimer." I see this mistake all the time.
If Slack is already checking those permissions, fixing the thumbnail issue should be fairly straightforward, yes?
Does that mean Slack has implemented, correctly, Gmail’s complicated permission model? Glad I’ve never enabled that integration.
It probably just uses Google drive search API and includes the results into slack's own results.