A tape sitting in Iron mountain would have a smaller attack surface and be compliant.
Potentially this breach will allow litigation that was financially infeesable for some people.
As a former WDIG employee I am not even suggesting anything concrete or that I have any knowledge of unlawful activity.
But as someone who also worked in the electronic evidence discovery field, the cost of blind discovery has a chilling effect on lawsuits.
Now that targeted discovery is possible, it will be within the budgets of more potential cases.
The forever retention was a marketing differentiator for Slack, so this type of events were a risk you have to accept.
But all about convenience and not compliance.
Conversely, offline doesn't mean unhackable/unleakable.
Why use passwords at all under that line of thinking.
That is why we talk about reducing attack surfaces.
A tape sitting in Iron mountain would have a smaller attack surface and be compliant.
Potentially this breach will allow litigation that was financially infeesable for some people.
As a former WDIG employee I am not even suggesting anything concrete or that I have any knowledge of unlawful activity.
But as someone who also worked in the electronic evidence discovery field, the cost of blind discovery has a chilling effect on lawsuits.
Now that targeted discovery is possible, it will be within the budgets of more potential cases.
The forever retention was a marketing differentiator for Slack, so this type of events were a risk you have to accept.
But all about convenience and not compliance.