At the 2015 RuCTF, we used misecredteam.slack.com to transfer notes and share files. For those that don’t know about Slack, it’s a modern chat client. While it may be just another messaging app to some people. I’ve used it through college, at work, and for groups like #misec and lansing.codes. There’s been talk about trying to get an official #misec slack channel.
During the November Lansing social, we did just that and misecgroup.slack.com was created. Later that night I found a project on Github that had a “push button” solution for creating a auto-invite application on heroku.com. Shortly after setting that up, I was able to tweet out the URL and people starting joining the new channel. If you’d like to set up a similar invitation application, then read the Github description and press either the Heroku or Azure deploy buttons based on what service you want to use to deploy the application.
How it works
The app works great. Heroku even took care of a lot of the hosting details, like handling TLS. Within a day, the channel had 30 members and I didn’t have to manually invite anyone. The only change I made to the app was cosmetic. I didn’t like the gradient background so I replaced it with a more “cyber” background. In order to change the application, I had to fork the github repository and connect it to my Heroku app. I used git and the Heroku CLI to do the heavy lifting. To change the background I simply replaced the bg.jpg in the images directory and redeployed the app.
IRC or death
A lot of #misec members prefer to stay on IRC. In an attempt to accommodate their preferences, I opened an IRC gateway to connect to the channel from their favorite IRC client. However that still requires to be on the #misec IRC channel and the irc channel for #misec slack… The only thing more annoying than having to be in multiple chats is being in multiple chats for the same reason.
So I found an alternative with the help of some#misec friends. Another Github project called slack-irc. The bot uses nodeJS to run, so hopefully anyone attempting this themselves have some experience with npm. Slack-irc made it possible to set up a slack bot that integrates with another IRC channel. So now #misec is in misec.slack.com’s #general channel and vice versa.
Becoming a Slacker
If you’re interested in joining the #misec slack channel, follow the steps below:
- Get an invite by going to misec.herokuapp.com and entering your email address you’d like to use for the account
- Finish creating an account for the channel
(Please note the team URL is misec.slack.com)
- Sign in from a Slack application on whatever device you prefer if you don’t want to use the web client.
- Optional: Go to https://misec.slack.com/account/gateways for instructions on connecting over IRC
Due to someone’s misuse of the herokuapp integration, we have had too many invites created and many of the attempts are bouncing. Below are some screenshots from our slack administration panel.
Unfortunately, we can only manually remove these old invites one by one. So we have resorted to shutting down the integration and relying on direct invitations from existing members. Any member of our slack channel can invite new users. Please find someone on twitter with #misec in their bio or past tweets and I’m sure they’ll help you get into slack.
- RT @_lukeanator_: #Misec Jackson socials are starting again! Join us at Chase in downtown Jackson April 26th at 6PM for food and conversati…23 days ago
- We are live in #misec Southfield!! https://t.co/KaPgQnHZSq35 days ago
- RT @InfoSecAli: Join #misec Southfield on April 14th at 7PM for a talk from @8_behr titled "Tales from the [De]crypt Keeper: Lessons Learne…45 days ago
- RT @InfoSecAli: We are at LFG in Royal Oak for the #misec #Southfield meetup! Join us!231 days ago
- RT @sherrod_im: We are hiring a PM for emerging threats products. This is an incredible role. The opportunity to design the next evolution…233 days ago