[ankey1]

Slack has a Reporting Security Vulnerabilities page on its site: http://slack.com/whitehat. Seems like something they would have taken seriously if it had been brought to them first.

[nailer]

Apparently it was, see: https://twitter.com/rootlabs/status/499723782244675584