Remove all Discord CDN links

[Kerry]

The chat program Discord is a known dumping ground for malware and malicious bots, and is widely used for command and control of serious malware including credential stealers, ransomware, and other things. Some malware can even use Discord to crash other players' games.

Sophos, an anti-malware publisher and research group, reports that the greatest amount of malware they've found on the Discord Content Distribution Network is, quote: "credential and personal information theft, a wide variety of stealer malware as well as more versatile RATs."

This means software that steals bank account info and Steam account info.

So by allowing games that link with Discord to run on Steam, ValveCorp is inadvertently putting their users and all the games on this platform at serious risk of catastrophic loss.

I believe that these games should be sanctioned or heavily restricted in their capability to link with Discord, and all links that lead to a Discord server should be considered a direct link to malware.

Source: https://news.sophos.com/en-us/2021/07/22/malware-increasingly-targets-discord-for-abuse/

EDIT: I will not allow this thread to be derailed by any method. Attempts to bring up previous threads are obvious attempts to derail a thread and will be treated as such.

Each creator who makes a post that attempts to derail this thread will result in one singular chain of action:

Mute, block, report. You're not worthy of my time if you keep trying to derail the thread and troll me. You're not going to get a rise out of me.

EDIT: I'm sick and tired of some people (not naming names) being so stuck-up and closed-minded that they cannot admit that other people have different experiences.

The technically-impossible happens all the time. Just because YOU haven't seen it happen, doesn't mean weird crap doesn't happen!

[ktulu84]

as a person who is using discord since 2017 and developing bots for almost a year, I can easily say that Discord is a safe platform.

If someone scams you or steals your info via discord, then its your fault not discords

[KalGimpa]

Tito Shivan の投稿を引用：

I woke up to +200 comments in this thread, how could this.

no kidding!

i mean, most are from the op, but that is some commitment

wonder how they are going to react when they learn about discord getting added natively to xbox and playstation

[76561199003456567]

khuhh;;;

[Boblin the Goblin]

BoraY の投稿を引用：

as a person who is using discord since 2017 and developing bots for almost a year, I can easily say that Discord is a safe platform.

If someone scams you or steals your info via discord, then its your fault not discords

It's weird how OP is saying for devs to use Steam groups and Steam chat.

When literally the exact same thing happens.

[ktulu84]

KittenGrindr の投稿を引用：

BoraY の投稿を引用：

as a person who is using discord since 2017 and developing bots for almost a year, I can easily say that Discord is a safe platform.

If someone scams you or steals your info via discord, then its your fault not discords

It's weird how OP is saying for devs to use Steam groups and Steam chat.

When literally the exact same thing happens.

steam groups is a dead feature and steam chat will never be good as discord chat. Non of the features of steam is compatible for developing

This shows how much OP is uneducated with programming and developing

discord is easily the third best platform for developers

[Kerry]

Start_Running の投稿を引用：

So OP. You got spooked by an articale written byu a company that just so happens to sell the solution the the thing they're panicking you about....

Let's clarify something here: I did not "get spooked" - these articles merely backed up my own experiences on the matter.

I had been on Discord since the beginning, May 13th 2015. I only ever stopped in 2020. That's five years and several months of Discord. (That means my experience outranks all of you for time on the platform.)

During that time, I downloaded no files and clicked no links. I have antivirus programs AND a pair of firewalls, one software and one hardware, operating on the strictest of security settings.

Despite these settings, I got hacked no less than seven times.

Here's the issue: I ran Discord... which functioned as a back door.

-------------------------------------------------------------------------------
Conclusion:

Discord
Internet security

Pick one. You can't have both.

[Kerry]

BoraY の投稿を引用：

as a person who is using discord since 2017 and developing bots for almost a year, I can easily say that Discord is a safe platform.

If someone scams you or steals your info via discord, then its your fault not discords

Nobody did that to me.

[Kerry]

Frostbringer の投稿を引用：

Kerry Freeman の投稿を引用：

Those links are merely transmission vectors, vectors that can be used multiple times.

For comparison, how many humans does the average mosquito bite? Mosquitoes are also transmission vectors.

On average, a mosquito bites one person before it’s swatted. 😁

If you wish to discussion transmission vectors why are you discounting things greater than discord , such as phishing emails or greater social media sites such as FB, Twitter, instagram, WhatsApp, etc..

Because those vectors, every single one of them, use the malware stored in the Discord CDN.

I'm saying the transmission vectors are how they get from the source to the infection site. They are not the root cause of the problem - the source of the infection is.

If we want to treat this pandemic, we need to treat the source. The Discord CDN needs to be cut off.

Like getting rid of mosquito-borne disease. We'll never get rid of the mosquitoes, so instead we go for the pools of standing water where the diseases originate.

We need to go for the equivalent - the Discord CDN.

[Boblin the Goblin]

Kerry Freeman の投稿を引用：

BoraY の投稿を引用：

as a person who is using discord since 2017 and developing bots for almost a year, I can easily say that Discord is a safe platform.

If someone scams you or steals your info via discord, then its your fault not discords

Nobody did that to me.

And you have no evidence you got compromised because of Discord. All you know is they got access to your account. That doesn't mean they got access through Discord.

None of us know your internet habits. Hell, there have been extensions in web browsers that were distributed through the official channels that contained data scraping malware. It didn't set any malware scanners or anti-virus programs off.

How do I know? I had one at one point. Then suddenly started getting emails about login attempts.

[Start_Running]

Kerry Freeman の投稿を引用：

Start_Running の投稿を引用：

So OP. You got spooked by an articale written byu a company that just so happens to sell the solution the the thing they're panicking you about....

Let's clarify something here: I did not "get spooked" - these articles merely backed up my own experiences on the matter.

So confirmation bias then?

Kerry Freeman の投稿を引用：

I had been on Discord since the beginning, May 13th 2015. I only ever stopped in 2020. That's five years and several months of Discord. (That means my experience outranks all of you for time on the platform.)

Not really m8. I mean i'm sure I haven't experienced some of the problems you have...but that may well be due to having enough sense to steer clear of said problems. As said. Discord ain't anything new. I mean it's just Usenet with a nicer interface :p

Kerry Freeman の投稿を引用：

During that time, I downloaded no files and clicked no links. I have antivirus programs AND a pair of firewalls, one software and one hardware, operating on the strictest of security settings.

Despite these settings, I got hacked no less than seven times.

And you're certain Discord was where you got hacked from. Not say, any questionable sites you might have visited over that same period?

Secondly . You are the only opne with access to that system of yours?

Kerry Freeman の投稿を引用：

Here's the issue: I ran Discord... which functioned as a back door.

-------------------------------------------------------------------------------
Conclusion:

Discord
Internet security

Pick one. You can't have both.

Yeah. There are literally millions of people who can't say that. So. Either you got 'hacked' through discord or through some orther service/apop/site or combination thereof that you visited.

You managed to get problems in discord. I haven't. I haven't been on it as long as you but logically if I use you as a baseline I should have been hacked at least twice by now. But. Nothing.

[Boblin the Goblin]

Kerry Freeman の投稿を引用：

During that time, I downloaded no files and clicked no links. I have antivirus programs AND a pair of firewalls, one software and one hardware, operating on the strictest of security settings.

Despite these settings, I got hacked no less than seven times.

Here's the issue: I ran Discord... which functioned as a back door.

-------------------------------------------------------------------------------
Conclusion:

Discord
Internet security

Pick one. You can't have both.

No it doesn't. A 'backdoor' is an exploitable hole in security measures. Discord doesn't function as one. It doesn't even have the access to be one.

You know what's common denominator in your story(ies)?

You.

[Kerry]

KittenGrindr の投稿を引用：

Kerry Freeman の投稿を引用：

Nobody did that to me.

And you have no evidence you got compromised because of Discord. All you know is they got access to your account. That doesn't mean they got access through Discord.

None of us know your internet habits. Hell, there have been extensions in web browsers that were distributed through the official channels that contained data scraping malware. It didn't set any malware scanners or anti-virus programs off.

How do I know? I had one at one point. Then suddenly started getting emails about login attempts.

They had to have gotten access through Discord - there was no other vector they could have used for their initial attack. Everything else was locked down tight, traffic had to go through two different firewalls, one software and one hardware, and my antimalware program Avast.

There was no way they could have gotten malware past that. Not unless they had a backdoor I installed voluntarily... and the only programs that I had at the time, other than secure game launchers like Steam, Arc, Origin etcetera, were default Windows programs... and Discord.

Process of elimination suggests Discord was the initial transmission vector.

[fluxtorrent]

in other words you are making it up

[Mad Scientist]

At this point it seems OP has an issue with discord itself, and is incorrectly blaming them for an entirely supposed scenario that is not a source of a large problem. Numerous pages shows blatant misinformation as demonstrated by many, many factually incorrect and impossible things others have noted which shows no realistic credibility.

Users are responsible for their accounts security, and users have the chance to secure their machines & internet connection if they are worried about any one single point of attack attempt.

Discord is not going to be blocked, only unsafe or malicious links will be removed as the service itself and its servers are widely known as a legitimate service and point of distribution. If there are malicious files or links on discord Report them to Discord as the responsibility of security for Discord is on Discord.

Please do not try to intentionally mislead users or give blatantly bad information and impossibilities. Many users with counter information are also industry professionals that are well experienced in such subjects. If you have an issue with Discord, its security, or its CDN feel free to contact Discord.

[Kerry]

Start_Running の投稿を引用：

Kerry Freeman の投稿を引用：

Let's clarify something here: I did not "get spooked" - these articles merely backed up my own experiences on the matter.

So confirmation bias then?

Kerry Freeman の投稿を引用：

I had been on Discord since the beginning, May 13th 2015. I only ever stopped in 2020. That's five years and several months of Discord. (That means my experience outranks all of you for time on the platform.)

Not really m8. I mean i'm sure I haven't experienced some of the problems you have...but that may well be due to having enough sense to steer clear of said problems. As said. Discord ain't anything new. I mean it's just Usenet with a nicer interface :p

Kerry Freeman の投稿を引用：

During that time, I downloaded no files and clicked no links. I have antivirus programs AND a pair of firewalls, one software and one hardware, operating on the strictest of security settings.

Despite these settings, I got hacked no less than seven times.

And you're certain Discord was where you got hacked from. Not say, any questionable sites you might have visited over that same period?

Secondly . You are the only opne with access to that system of yours?

Kerry Freeman の投稿を引用：

Here's the issue: I ran Discord... which functioned as a back door.

-------------------------------------------------------------------------------
Conclusion:

Discord
Internet security

Pick one. You can't have both.

Yeah. There are literally millions of people who can't say that. So. Either you got 'hacked' through discord or through some orther service/apop/site or combination thereof that you visited.

You managed to get problems in discord. I haven't. I haven't been on it as long as you but logically if I use you as a baseline I should have been hacked at least twice by now. But. Nothing.

Answers to your statements:

Not confirmation bias.

I also have been on the internet long before the creation of Discord. I also know enough not to do anything stupid. It's just like with strangers on the street - same basic protocols.

I am VERY certain the initial transmission vector was Discord, via process of elimination. I had nothing unsecured on my system except Discord.

No I don't visit questionable sites. Yes, I'm the only one who has access to my system.