Slack App Security - Securing Your Workspaces From a Bot Uprising

Explore the security implications of Slack's developer platform and third-party apps in this BSidesSF 2019 conference talk. Delve into the history of the Slack app directory, unique security challenges, and Slack's efforts to enhance user safety. Learn about the current testing process, manual testing limitations, and potential solutions such as penetration testing, certifications, and compliance vendor reviews. Gain insights into risk ownership, combined risk scores, and strategies for securing workspaces from potential bot uprisings. Discover how to balance the powerful functionality of Slack's customizable workflow with responsible security practices.