Exploiting Slack's video embeds to achieve E2EE communication

Details

Yes This is a clever exploit and proof-of-concept Slack app utilizing Web Crypto APIs inside an embedded iframe to manage keys and decrypt payloads.

3 comments analyzed.

Competitors mentioned: webxdc (DeltaChat implementation), WeChat mini apps, Alipay mini apps

Concerns raised: Increased attack surface and security vulnerabilities with more components, Difficulty securing multiple connecting points

Feature requests: Major services support fully-featured apps inside their client

Other products that read as similar to this one — 411 launches clear the similarity bar, closest 8 shown.

Attention rank: #98 of 412 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).

Launched 228 days after the earliest competitor.

slacklet · github · 2026-09-17 · 9 upvotes · similarity 0.53
BeefTV · github · 2026-09-24 · 333 upvotes · similarity 0.50
SVEET · github · 2026-09-18 · 13 upvotes · similarity 0.47
An assertion library for E2E testing and real user monitoring · hn · 2026-07-03 · 8 upvotes · similarity 0.47
Marlin-2B: a tiny VLM to extract structured information from videos · hn · 2026-05-18 · 7 upvotes · similarity 0.47
ScreenCI · hn · 2026-07-06 · 7 upvotes · similarity 0.47
calab · github · 2026-09-26 · 15 upvotes · similarity 0.47
Elah · hn · 2026-06-09 · 5 upvotes · similarity 0.46