Public Disclosure of Slack Single-Channel Guest Directory Iteration

UPDATE 2019–03–12: Slack rolled out a change to the users.list API endpoint on Friday March 8, 2019 to filter responses for guests. Guest account calls to that endpoint now only receive profile information for users in their channels 🎉

This change seems limited to the users.list endpoint. Guest calls to users.profile.get are still able to query…