←back to thread

Discord Is Threatening to Shutdown BotGhost

(update.botghost.com)
139 points exists | 3 comments | 23 Jun 25 20:16 UTC | HN request time: 0.209s | source
Show context
Banditoz ◴[23 Jun 25 21:03 UTC] No.44360058[source]▶
Playing devil's advocate a bit, if this service hosts a Discord bot you create for you, that means it uses the bot token, right? The service has to store and secure hundreds of thousands of tokens, if all of those get breached/leaked, an attacker can do a lot to a lot of Discord servers assuming it has the requisite permissions.

However, they do claim that Mee6 (the biggest Discord bot by # of servers, iirc) offers a similar feature but Discord is letting them slide?

replies(1): >>44360071 #
1. paxys ◴[23 Jun 25 21:04 UTC] No.44360071[source]▶
Discord holds user session tokens right? If those tokens are leaked then attackers will have access to Discord user data. Seems like Discord should be shut down.
replies(2): >>44360092 #>>44360109 #
2. Banditoz ◴[23 Jun 25 21:06 UTC] No.44360092[source]▶
Hmm, good point, but Discord can't control the security of a third party platform like this.

Not saying it's the right thing to do, but it seems to be their reasoning.

3. sneak ◴[23 Jun 25 21:07 UTC] No.44360109[source]▶
Discord has the plaintext of every single message ever sent via Discord, including all DMs.

Can you imagine the value to LLM companies?

It’s probably the single largest collection of sexting content outside of WeChat (and Apple’s archive of iCloud Backups that contain all of the iMessages).