Show HN: Exploiting Slack's video embeds to achieve E2EE communication (opens in new tab)
Some time ago, while exploring Slack’s Block Kit reference, I noticed something peculiar: the video block. When I saw that it accepted a video_url, the first thing I thought was: how does it distinguish between any content and an actual video? Would there be any particular requirement or limitation in the embed? Foreign sources?
Read the original article