Public Disclosure of Slack Single-Channel Guest Directory Iteration

UPDATE 2019–03–12: Slack rolled out a change to the users.list API endpoint on Friday March 8, 2019 to filter responses for guests. Guest account calls to that endpoint now only receive profile information for users in their channels 🎉

This change seems limited to the users.list endpoint. Guest calls to users.profile.get are still able to query…

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store