Slack: Data exports stored on S3 can be scraped easily
The URLs that are used to download the exports can be guessed easily by an attacker. The location of the export file is based on a date, a team ID and a team name: http://s3-us-west-2.amazonaws.com/slack-files2//export//%20Slack%20export%20.zip The information an attacker needs, is the team its...