4 ms·

Discord is a product, not a protocol, so it should be in their best interest to communicate the extent to which a third party application might misuse their dat

Discord is a product, not a protocol, so it should be in their best interest to communicate the extent to which a third party application might misuse their data. This is the case with the new scopes that require ID verification now, backed by the promise that Discord will sue you if you break their conditions of using the data provided to you. This has some other unfortunate side effects (user tokens can't be used for bots, third party clients are a risk), but unfortunately the only way to really curtail this behavior. Privacy is not something easily understood, especially for people outside tech that just want to be around their friends during the pandemic, do not be blind for this. Technology can't be the sole component of solving this issue, so I'm glad Discord is committed to legally perusing those that misuse their API.

d110af5ccf 5y ago
That's a pretty weak solution in my opinion. Mobile OSes and browsers use a model based on permissions. There's zero reason for a Discord "bot" to be able to send information to arbitrary endpoints without informing the user about them up front. Collecting ID and threatening to sue is a half assed response. Or more cynically ... > (user tokens can't be used for bots, third party clients are a risk) ... how convenient. So sorry, but we need to restrict what you can do for your own protection. Where have I heard that one before? > Privacy is not something easily understood "Privacy" isn't what needs to be understood here. "Don't run arbitrary code" is what applies; it applies everywhere whether you like it or not.