For work I use my personal laptop and I am required to run Slack to keep in contact with coworkers however it occurs to me that this could potentially be used as an invasive surveillance tool unless it is forced to run in a sandbox.
For instance what if it were allowed to scan my file system, including any attached USB thumb drives, and what if it were allowed to take screenshots? What if there is a built-in keylogger? I need to make sure that this software is not being used for improper purposes. We all know how power can be abused, and how even a little bit of power over people can tempt a weak person to do bad things.
IIRC I downloaded it using the Mac App Store.
Does anyone know how I can determine what the default sandbox setting of this app is?
If the app is bypassing the sandboxing mechanism how do I nevertheless enforce sandboxing?
Has anyone here managed to detect open files (using lsof on the command line) that Slack was accessing, that might indicate suspicious activity?