Slack uppmanar en del android-användare att byta lösenord. Har klantat till det rejält med lösenordshanteringen i sin androidapp.

Slack uppmanar en del android-användare att byta lösenord

Har klantat till det rejält med lösenordshanteringen i sin androidapp

Android Police rapporterar att vissa som använder samarbetsplattformen Slack på Android har fått mail från Slack där de uppmanas byta sitt lösenord.

Anledningen till det är att Slack efter en uppdatering av appen till Android den 21 december ska ha lagrat användarnas lösenord i klartext. Det innebär att andra appar som finns på telefonen i teorin ska ha kunnat komma åt Slack-användarns okrypterade lösenord. I ett mail som gått ut till berörda användare skriver Slack bland annat:

"On December 21st, 2020, Slack introduced a bug that caused some versions of our Android app to log clear text user credentials to their device. Slack identified the issue on January 20th, 2021 and fixed it on January 21st, 2021. A fixed version of the Android app is available and we have blocked usage of the impacted version(s)."

Enligt Slack ska det vara en mindre del av deras androidanvändare som påverkats av den här buggen. Dessa ska ha fått mailet som ni kan läsa i faktarutan nedan. Där uppmanas de att uppdatera till senaste Slack-versionen till Android, rensa sin telefon från all data som Slack tidigare sparat, byta sitt lösenord i Slack samt på andra tjänster där de eventuellt kan ha använt samma lösenord.

androidpolice.com

Internet, Tjänster, slack, lösenord, fail, samarbetsplattform, samarbetstjänstTack till Levent Y.

Mail från Slack till vissa Android-användare

Hello,

Slack is requiring a password reset for the [redacted] account on [redacted]. We are taking this step as precaution due to an error that we discovered and there is no evidence of any unauthorized or third party access to this account. Maintaining the security of your team and the privacy of your communications is important to us. We apologize for the disruption.

On December 21st, 2020, Slack introduced a bug that caused some versions of our Android app to log clear text user credentials to their device. Slack identified the issue on January 20th, 2021 and fixed it on January 21st, 2021. A fixed version of the Android app is available and we have blocked usage of the impacted version(s).

To set your new password immediately, please use the following link: [redacted]
Selecting a complex and unique password is strongly recommended, and is vital to protecting the integrity of your account. We suggest the use of a password manager to help you keep track of your passwords for every service you use.

Finally, you can manually delete the logs from your device. Be advised this action will also log you out of all Slack workspaces of which you are a member. We have already invalidated the logged password, but if you have reused this Slack password to log into other websites, this is highly recommended.

You can do this with these instructions on your Android device:

From your home screen, go to the Settings app
Scroll down and select Apps
Navigate to and select Slack
Select Storage
Click Clear data on the left side of the screen
Click OK to confirm that you wish to clear data
Log into Slack using your new password
We very much regret any inconvenience we have caused. If you have additional questions, you can reply directly to this notification — our support team is standing by and ready to help.

Sincerely,
The team at Slack