Slack’s Google Drive App can share your private Docs and Drive files

Slack introduced a Google Drive integration in 2017, which proved to be highly useful for Kapwing, an online video editing startup. However, a recent discovery was made regarding the app’s file preview feature. It was found that the Google Drive Slack app could share private, unshared documents and files within a workspace, even before they were officially shared. This was achieved by creating high-resolution preview images using the user’s own Google permissions. While this may not be a major issue for some users, it can pose a problem if private documents are inadvertently shared in a public Slack channel. The author suggests that the app should provide clearer information about this feature to prevent unauthorized access.

https://www.kapwing.com/blog/slacks-google-drive-integration-shares-private-documents/

To top