12 ms·
Unlocking Discord Nitro features for free
- deevus 3y agoIt rightly warns that you could get banned for using these tricks, but is there any precedent for Discord banning users for this kind of thing?
- viraptor 3y agoDiscord is happy to ban people for anything. They even stop people for using alternative clients. If you care about your account, do not mess with discord.
- janosd 3y agoI got banned directly after signup. I got an email 1 second after signing up that I violated the community guidelines. The algorithm didn't like my Firefox/uBlock Origin combo I guess. Now my phone number is tainted and I can't make an account anymore. Oh well, no Discord for me I guess. (They really are very trigger-happy.)
- toastal 3y agoAll project maintainers: take notes on why your community shouldn’t be built around Discord’s service. Bridge to it only if you must, but don’t make it the primary chat option.
- pndy 3y agoFrom my experiences discord servers tends to draw people who are least interested in talking about the project and more about casual talk and sharing memes. Most of the time these places feels like an equivalent of shoutbox feature on old forums. Still, I received more support via discord than forums which on the other hand seems to be mostly full of people who vent their complexes and issues on users and lock discussions for absolutely every single stupid thing, just to show they're in charge. Perhaps a community has to be small, dedicated, mature and aware enough to use e.g. Matrix or other solutions, leaving running blessed, approved discord servers to communities, various enthusiasts.
- hinata08 3y agoMatrix isn't better than Discord on that aspect. There are the anime communities already, so it's not just about projects. Also, on Discord, you can have pretty serious discussions and organise your projects. But it's never done in #general : you need to create specific rooms where users focus. The shoutout function is at the heart of the group on Discord. But Discord won users in the first place by allowing them to create rooms and organize discussions. It was meant to run projects (if you consider a RPG is a project, but whatever, as long as it works)
- toastal 3y agoAnd Matrix is currently too heavy to self-host which means relying on Matrix.org (who also controls the spec). My vote would be an XMPP MUC that’s bridged to IRC. This keeps it lightweight & decentralized. Both of these options could be ran with hundreds or thousands of users on a potato compared to Matrix.
- Okawari 3y agoI've been selfhosting a dendrite matrix instance for about a year now. I'm only in a few public channels of a few hundred users, but also #matrix:matrix.org which has 44000 users and it hardly uses any resources. I have no experience with Synapse which was apparently quite the hog as far as I know, but Dendrite is quite lean it seems
- toastal 3y agoI’ve heard it has less system resources, but the Synapse compatibility needs to be maintained. One of the bigger runaway issues tho becomes storage as the protocol requires replicating the entire chat/attachment history of all users for all of their DMs & chatrooms which I’ve read caused a lot of folks to shutdown their servers either because Postgres bloated up or hosting all the static content got too costly. This model makes sense when folks treat chatrooms like a permanent log, but if you treat it more like IRC, there would be no requirement for replication beyond a couple of messages for a new user to see the current topic to participate (while also covering the case that searching these chatrooms is a pain & much of their discussions should have moved to forums/mailing lists).
- keyle 3y agoThe beauty of entirely closed systems. Have poor security and bannish people for trying anything funky.
- mdwalters 3y agoI used gtkcord4, and I didn't get banned. I used Vencord, didn't get banned either. Of course, I wouldn't reccommend using any of these for the saftey of your account, as I was dumb back then and never learned about the risks. --- Also, one Discord alternative I would reccommend is Revolt[1]. Great community, and was famous for being featured in a No Text To Speech video (and my friend's server had a brief cameo too!), and it's adoption of discriminators (i.e. randomguyabcd#5408). [1]: https://revolt.chat/ https://revolt.chat/
- doublerabbit 3y agoOpen source to: https://github.com/revoltchat https://github.com/revoltchat Really quite impressed.
- WhrRTheBaboons 3y agosaving for later
- ghosty141 3y agoIirc there is no confirmed instance where people got banned for using an alternative client.
- nrabulinski 3y agoThere’s a lot of instances, for example the developer of one of the alternative clients https://github.com/Bios-Marcel/cordless https://github.com/Bios-Marcel/cordless
- Jowsey 3y agoFrom the README of Vencord, one of the most popular mods: > Client modifications are against Discord’s Terms of Service. However, Discord is pretty indifferent about them and there are no known cases of users getting banned for using client mods! So you should generally be fine as long as you don’t use any plugins that implement abusive behaviour. But no worries, all inbuilt plugins are safe to use [...]
- didntcheck 3y agoI have definitely known people be banned for "selfbots" (and I mean personal utility ones, not actually using a user account as a public service account), however they were almost always doing something unwise and conspicuous, like spamming username change requests for "animations", or showing it off in the API server literally in front of a Discord dev
- asimpleusecase 3y agoThis is classic “hacker” in the curious and skilled sense of the word. No serious harm and it reminds us apps are not magic and code is cool.
- userbinator 3y agoPerhaps closer to "cracker", but I agree that this is the sort of knowledge that the corporates don't want us to know --- so they can attempt to squeeze more $$$ out of us without resistance.
- whelp_24 3y agoI mean cracker in the current sense of the world. And he did the equivalent of inspect element. It was clever, but no real harms were done to any parties.
- kkarakk 3y agothe only people who use the term cracker are people trying to critique the ethicality of hacking.
- panki27 3y agoI disagree. Cracking is, historically speaking, the act of circumventing copy protection mechanisms. So to me, cracking is one of the disciplines of hacking.
- its_a_random_ac 3y agoI'm not accusing the author of doing this, but providing a simple base64 encoded blob at the end to run to enable everything would be a pretty easy attack vector, wouldn't it? edit: just decoded it and touché
- berbec 3y agoFor those to lazy to run base64 --decode, here's the result: // Here's a cake if you thought about inspecting the code before executing it: let css = 'font-size: 36px; font-weight: bold; color: red'; console.log("%cNEVER paste code you don't understand into the development console.", css); console.log("%cThis is the best way to compromise your account.", css);
- mythz 3y ago> For those to lazy to run base64 --decode, here's the result: Or just strip the eval and use JS's native base64 decoder: atob(base64)
- _joel 3y ago"Don't cross the streams!", although I take your point...
- SamuelAdams 3y agoCyberChef has been my go to for a while for this sort of stuff. Easy to use GUI, can stack multiple commands fairly easily. https://gchq.github.io/CyberChef/ https://gchq.github.io/CyberChef/
- notpachet 3y agoWow, I had zero idea you could use string substitution for formatting console.log messages. (Although I guess if I'd stopped and thought about it, there had to be something enabling those big scary messages in the console for certain websites...)
- deleted 3y ago
- laserbeam 3y agoI get that some themes would be enabled this way, but for them to decide streaming quality with a client side check instead of a server side one is quite baffling.
- can16358p 3y agoEspecially given the fact that they could simply inspect bitrate in/out, they don't even need to access the actual video, it can be fully encrypted (even if not ATM) and by examining how much data is transferred they can know which quality they are streaming at.
- jtsiskin 3y agoExcept that bitrate is highly variable; a high quality stream of static content can use way less bandwidth than a lower quality stream encoding a lot of motion. Now keep in mind they’re continually developing; perhaps testing different scaling preferences, or different codecs like AV1; suddenly you need a host of different bandwidth:estimated quality rates, that change over time and need to be kept in sync with client side changes… it’s not worth it
- userbinator 3y agoCurrently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.
- ivraatiems 3y agoI suspect it's less they thought "this is a great implementation" and more "if people figure out how to break it, we'll patch it." This is the first time in several years of using Discord that I've heard of anyone even trying to circumvent their access/permissions structure for Nitro, so I see no reason why they'd bother unless this was widespread.
- Aulig 3y agoModded discord clients have been around for quite while. But indeed, the threat of being banned deters most people and if just a handful of people use a modded client discord doesnt care probably.
- SSLy 3y agoThere are even people like me, who have Nitro and still use modded client for different reasons.
- rvnx 3y agoBeing able to delete your previous messages in bulk is a very good reason for example, it's borderline (or completely ?) illegal to threaten users to ban them if they choose to use their right to mass-delete their previous messages.
- WhrRTheBaboons 3y agoillegal in EU (unless they provide some other option to comply with GDPR)
- oliyoung 3y agoOnce again the cardinal rule of front-end engineering proves true "never ever trust the client"
- s1mon 3y agoI use Discord all the time, but I have seen zero reason to get Nitro. Every time they try to upsell it to me the "features" are unnecessary. The marque feature either "50MB uploads" (Nitro Basic) or "500MB uploads" (Nitro). Is this per file, per day, per month??? I only share the occasional screenshot or small file, so uploads have never been an issue. The rest of the "benefits" - "server boosts", custom Emoji, or a special Nitro Badge - seem ridiculous. What do people use this for?
- dbt00 3y agoHonestly, I pay because I'd rather Discord make a business of being paid by users than waiting to see who they end up getting paid by instead.
- spondylosaurus 3y agoIt's per file, although I also think it applies per message (i.e., you can upload 10 photos at a time, but they can't collectively exceed 50MB on the free plan; you'd have to split them across multiple messages).
- FireInsight 3y agoIt's 50mb on Nitro Basic, and like 5mb on free tier. This has bit me a few times when sharing screenshots (4K ultrawide), but I still wouldn't pay for a service Imgur & co provides for free.
- foxes 3y agoWhats wrong with just paying for software you find useful / you want to support? Custom emoji are fun to me, so you just aren't the target audience lol
- Arisaka1 3y agoWhat's wrong with realizing that a business is charging money in exchange for product features, and then evaluate whether the features are worth the price? It's one thing when they raise donations, and they leave you a custom window to put your price. But when you say "these features will cost 10 bucks for you" then it's not about whether you have the money or not, but whether the exchange of goods holds an equal worth for both parties. And also, in the bizarre world where Discord monthly was 5 bucks but people wanted to pay 10 because it's that good (value is subjective, I get it), and they really want to show their admiration then nothing stops them from paying for 2+ accounts! I've seen a similar argument for a game that came out that had no battle pass. "Oh I would love to have battle pass in the game, the company deserves the money for the good product", well buy 2+ copies and gift them to your friends or family then. No reason to burden the average player with added micro-transactions on a fully priced product to express gratitude.
- ColoursofOSINT 3y agoDoes anyone know the theme of the website? It is really nice.
- quic5 3y agoDigging through the source I've found https://github.com/cotes2020/jekyll-theme-chirpy https://github.com/cotes2020/jekyll-theme-chirpy
- WhrRTheBaboons 3y agocheers!
- sneak 3y agoA reminder: everything sent via Discord, including DMs, is being logged in plaintext by Discord and will be available to them and whoever buys them (it was looking to be Microsoft for a while, though now it looks like they will IPO). Simply having an account there normalizes having personal conversations that can be easily data mined for AI, or otherwise used by Discord or their database/systems administrators. Section 702 of the FISA Amendments Act (FAA702) allows the federal police to access all of same without a warrant. The crypto frontrunning possibilities alone must be worth dozens of millions per day. Friends don't encourage friends to use non-e2ee chat systems. Don't be the honey in the trap.
- anticensor 3y agoFortunately, Discord has traceless deletion of messages. Once you delete a message, it is no longer stored at their databases.
- CatWChainsaw 3y agoIs this really the case? I'm skeptical because I kept a conversation with someone who deleted their whole account. The messages are still there on my end which means Discord still has them.
- anticensor 3y agoUser account deletion sadly does not imply deletion of said user's previous messages. They are instead coalesced to a unified ghost user. Messages have to be deleted manually.
- wink 3y ago> Simply having an account there normalizes It's long been normalized, Discord has already won. I'm not saying that it's great, but for certain communities you don't have a choice, besides not participating. It's actually even worse than back then, when it was "everyone has WhatsApp" because you could easily contact the people otherwise, you already had their number. But imho personal conversations are not the draw for Discord, it's communities with semi-public spaces (public as in 100 people will read it, not "it's available to everyone").
- wink 3y agoIn the good old times Discord's dev console wasn't even locked and I remember using it to file a bug report with a good description. At least they still provide an easy way in, I've also given up to debug some other electron apps where I only had the binary.
- totetsu 3y agoRecent openAI suddenly disabled their beta testers discord, and I couldn't see who or what we had all been discussion anymore. I wondered if there was a way to export chats so server managers couldn't just cut a community off from each other with no record to browse after. There is a bunch of chrome extensions out there to export discord chats but most seem to have some payment gated features. turns out just copying the extension source out of the chrome folder, modifying the "is_pro" like boolean checks in js and loading it back as an unpacked extension is very easy.
- Bu9818 3y agoDiscordChatExporter: https://github.com/Tyrrrz/DiscordChatExporter https://github.com/Tyrrrz/DiscordChatExporter It's a standalone program using the API in a nonstandard way but I don't think anyone's been banned for using it yet.
- tsumnia 3y agoFYI while this will display the various channels, if your account does not have access to the channel, you cannot export its logs. For channels you can collect, you get the author, datetime, message content, links to any attachments, and reaction counts (but not whom made the reactions). I've been using DCE to do some analysis on student interactions. This was a hurdle we ran into while exporting logs for various class channels.
- acqbu 3y agoIntriguing, but it's probably only a matter of time until it's going to get patched.
- miki123211 3y agoI wonder if you could use this hack to enable stereo audio and turn off all the audio processing, which you can't fully do in the settings.
- numlock86 3y agoI've been enabling devtools and the button for 1080p60 streaming ever since I saw the possibility to just do it client side. And it works. I don't know for how many years by now, but apparently no one at Discord cares.
- nervousDev 3y agoI once tried to go down this road but failed to have a consistent way of patching the client specially after updates and basically give up. Now this method is sparking my "lets crack this open and poke around" hitch again! Is there a simple way to go through the available API through this method? I tried logging everything but its a hot mess with maps, i18n, etc. Wonder if someone has gone through the trouble of creating like a reverse-engineered doc kinda thing
- ramesh31 3y agoIf your "feature" is something trivially implemented for free by a third party client, then it's not a feature. It's rent.