4 ms·
I work, kind of, in this space - and it's been wild to me how incredibly easy it is to embed myself into public Discord servers that offer fraud/abuse bots. Tha
by bennyg 4y ago
I work, kind of, in this space - and it's been wild to me how incredibly easy it is to embed myself into public Discord servers that offer fraud/abuse bots. That might speak to the sophistication of what I find (vs. groups with better OpSec). I agree though, I'm surprised this was operated on the public internet with a great domain name.
- dmix 4y agoProbably much the same for phone spam which is why all of us get (semi-targeted) calls from indian call centers daily. Plenty of these are spawn out of Discord/Telegram networks to coordinate infrastructure. Via the grey/blackhat versions of Twilio. It's far too common for the operators to give a shit. See: https://www.youtube.com/watch?v=le71yVPh4uk https://www.youtube.com/watch?v=le71yVPh4uk
- rejectfinite 4y agoYea but whats the option? They need to sell to people so the Discord/Telegram and website need to be easy to access. And Discord/Telegram and websites want it to be easy to make stuff with/on them. The alternative is some vetting process where you submit a form for what the site is for and then someone from an authority logs in and checks manually.
- bennyg 4y agoI'm under the assumption that there are groups that require reputation to join (e.g. on private Telegram) that have a higher barrier of entry than a public Discord invite.