4 ms·

Congrats on finding this. Very impressive for a 15-year-old! The section "How to Protect Yourself" is lacking. Step 1. Don't receive this information in the p

by Tepix 2y ago

Congrats on finding this. Very impressive for a 15-year-old! The section "How to Protect Yourself" is lacking. Step 1. Don't receive this information in the push message. Only send the fact that there is something waiting for you in the app. Chances are there are other vulnerabilities that compromise the end-to-end encryption guarantees provided by the app (and only by the app). In Signal on iOS: Click on your icon in the top left corner. Click on settings. Click notifications. Click on display below "message contents". Make your choice. Another situation where convenience clashes with security, unfortunately.

anon-3988 2y ago
Step 2: If you use Discord, don't allow invites from _anyone_. Its quite bizarre why social media apps allow anonymous people to interact with you. 99% of the conversation I have is with people that I roughly know.
- ziddoap 2y ago
  >Its quite bizarre why social media apps allow anonymous people to interact with you. I mean, it's one of Discord's major use-cases. Joining a server of a common interest and meeting/talking with other people that share that interest.
- im3w1l 2y ago
  Discord is for gamers and quite a lot of people will be playing a game and tell someone "add me on discord my tag is xyz". Not allowing invites would seriously cut into the usability.
  - Marsymars 2y ago
    You could have it so both people have to add each other before there's any indication that either person added the other. No extra work for person A, and the work for person B is just what person A had to do anyway.
    - mplewis 2y ago
      This is mostly unusable for what should be obvious reasons.
      - Marsymars 2y ago
        I'm... not actually clear on what those reasons are? For the adder, the experience is exactly the same - the only difference is that there's no longer an adder and an addee - instead there are two adders.
- high_na_euv 2y ago
  So, how would you start interacting with your friends if you just created account? >anonymous people Wtf, how is this even relevant?
  - anon-3988 2y ago
    You can add them by creating a unique, temporary UUIDs/links that they can use? You know them from somewhere else, lets say I play a game and we decided to get into a voice chat. We could create a temporary, dynamically created voice chat that we can all join (much like Google Meet) where all of us are anons. Then, if we really want to know each other, we can then share the UUIDs. I understand why ANYONE can send an email to me (I can decide when/will to check them) I don't understand why ANYONE can whisper to my ears (I cant decide since they are pushed to the top of the app)
    - mplewis 2y ago
      Adding this level of friction to the process is not viable for a messaging platform whose bread and butter is connecting with friends.
- udev4096 2y ago
  Just don't use it. Expecting privacy and security from a literal keylogger. Who in their right mind uses a plain-text messaging app in 2025?
  - mplewis 2y ago
    Most people, actually.
  - zolland 2y ago
    How is Discord a key logger?
- Bluescreenbuddy 2y ago
  If you're worried about anonymity and you're using discord, you're failing. It's not made for that.
- squigz 2y ago
  > Its quite bizarre why social media apps allow anonymous people to interact with you Bit strange to attribute this to 'social media apps', isn't it? I'm interacting with an anonymous person right now. Most platforms allow it, including the older ones (i.e., IRC)

by Tepix 2y ago

anon-3988 2y ago

Step 2: If you use Discord, don't allow invites from _anyone_. Its quite bizarre why social media apps allow anonymous people to interact with you. 99% of the conversation I have is with people that I roughly know.

ziddoap 2y ago
>Its quite bizarre why social media apps allow anonymous people to interact with you. I mean, it's one of Discord's major use-cases. Joining a server of a common interest and meeting/talking with other people that share that interest.
im3w1l 2y ago
Discord is for gamers and quite a lot of people will be playing a game and tell someone "add me on discord my tag is xyz". Not allowing invites would seriously cut into the usability.
- Marsymars 2y ago
  You could have it so both people have to add each other before there's any indication that either person added the other. No extra work for person A, and the work for person B is just what person A had to do anyway.
  - mplewis 2y ago
    This is mostly unusable for what should be obvious reasons.
    - Marsymars 2y ago
      I'm... not actually clear on what those reasons are? For the adder, the experience is exactly the same - the only difference is that there's no longer an adder and an addee - instead there are two adders.
high_na_euv 2y ago
So, how would you start interacting with your friends if you just created account? >anonymous people Wtf, how is this even relevant?
- anon-3988 2y ago
  You can add them by creating a unique, temporary UUIDs/links that they can use? You know them from somewhere else, lets say I play a game and we decided to get into a voice chat. We could create a temporary, dynamically created voice chat that we can all join (much like Google Meet) where all of us are anons. Then, if we really want to know each other, we can then share the UUIDs. I understand why ANYONE can send an email to me (I can decide when/will to check them) I don't understand why ANYONE can whisper to my ears (I cant decide since they are pushed to the top of the app)
  - mplewis 2y ago
    Adding this level of friction to the process is not viable for a messaging platform whose bread and butter is connecting with friends.
udev4096 2y ago
Just don't use it. Expecting privacy and security from a literal keylogger. Who in their right mind uses a plain-text messaging app in 2025?
- mplewis 2y ago
  Most people, actually.
- zolland 2y ago
  How is Discord a key logger?
Bluescreenbuddy 2y ago
If you're worried about anonymity and you're using discord, you're failing. It's not made for that.
squigz 2y ago
> Its quite bizarre why social media apps allow anonymous people to interact with you Bit strange to attribute this to 'social media apps', isn't it? I'm interacting with an anonymous person right now. Most platforms allow it, including the older ones (i.e., IRC)