PureBasic Forums - English

Discord sucks tbh.
All clients are a mess and privacy risk (the web interface is really bad for obvious reasons).

Mijikai wrote:Discord sucks tbh.
All clients are a mess and privacy risk (the web interface is really bad for obvious reasons).

Do you have any sources for that?

NicTheQuick wrote:

Mijikai wrote:Discord sucks tbh.
All clients are a mess and privacy risk (the web interface is really bad for obvious reasons).

Do you have any sources for that?

Security is based entirely on DTLS and TLS and software by people who don't know how memory corruption and domain security works.. IRC at least has audited client software

I do not find any good sources to confirm your concerns. There are only third-party discord apps that seem to create security problems.

So again: Do you have any sources? I want to understand the problem more deeply.

NicTheQuick wrote:I do not find any good sources to confirm your concerns. There are only third-party discord apps that seem to create security problems.

So again: Do you have any sources? I want to understand the problem more deeply.

That's cause it's a bunch of CGI scripts behind a REST API.. There is no way you can prove the people who wrote all the official clients for it solved exploitable memory corruption or xss or csrf or even know what any of it is, or the same for the libraries they use(CVE-2018-1000006 etc..).

There are IRC clients and servers for most platforms that have survived binary analysis and fuzzing by skilled people for decades..

I just joined the first one I saw.
I'm OLD and can't see anyone I know yet.

GeoTrail wrote:I just joined the first one I saw.
I'm OLD and can't see anyone I know yet.

I've been around pb for 16 years and sort of know you. Sneaked around last night and saw you mention alcohol (Yuk!). Now Thai massage, oh yeah baby!

I think I have reached that age where I am increasingly unfamiliar with pop culture. I have absolutely no idea what "Discord" is.

Welcome to the club.

It's just a chat.

Kuron wrote:I think I have reached that age where I am increasingly unfamiliar with pop culture. I have absolutely no idea what "Discord" is.

It's a REST CGI based chat back-end for engagement platform types.. Lots of binary clients for different platforms both official and unofficial.. The way they handle security bounties makes researchers report to everyone but Discord so sandbox needed..

The SpiderBasic Discord chat is at: https://discord.gg/ymY8zTf

Get Discord now!

It is available for Android, iOS, Linux, macOS, Web, Windows.