Let's Reverse Engineer Discord

How we reverse engineered Discord’s call protocol and found it being MITM-ed by Discord

Article, Comments

#discord #privacy #mitm

Reasons not to use the Discord communications system

The Discord communications system requires running a nonfree client program. That alone is reason to refuse to use it.

❗️ The program reportedly collects lots of data about users.

❗️ The developer denies the claim that Discord reports which processes are running on the user's machine. I have no way of determining the facts about this specific point. Whether it collects those particular data is a minor detail; I mention it only to avoid appearing to assert a criticism that might not be true.

❗️ For the same reason, I mention that selling personal data is not the sole way that the company makes money.

❗️ I don't think that question how it makes money really matters. What matters, ethically, is what the software does to users.

❗️ The developers' motives for making it do those things are pertinent to understanding the situation but should not affect our moral judgment of mistreatment of users.

❗️ One user quit using Discord because it demanded she fill out a Google reCAPTCHA, apparently because she was connecting through Tor.

❗️ Google CAPTCHAs didn't work for me, because they required running nonfree Javascript code.

❗️ Discord insists on tracking users. If a user connects through a VPN, Discord demands that user provide a phone number.

❗️ Discord locks accounts that don't have associated phone numbers. When an account is locked, also called "deactivated", the user is not allowed to make real use of it until person adds a phone number.
Discord may demand to talk with you by phone if it decides you are suspicious — for instance, if you contact it via Tor.

❗️ If I understand right, if you use Discord regularly via Tor you would need to carry that phone with you all the time. A burner phone, one what you possess only for a short time, would not be allowed to do the job.

❗️ Thus, whoever uses Discord gets tracked either by the Discord server (and anyone looking at where the packets are coming from) or by the phone.

❗️ Users report that Discord shut off their accounts and won't tell them why.

The Discord web site also offers application nonfree programs. You shouldn't use them, naturally, but they are a separate issue from using the communications system itself.

💡 Reasons not to use the Discord communications system
https://stallman.org/discord.html

#stallman #discord
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv

Click on the hashtags. If the note doesn't show up, just type the hashtag in the chat. Else, the note got vanished

#afwall
#alternatives
#altfrontends
#amp
#apk
#aurora
#backup
#blockadstrackers
#bounty
#classroom
#cleaningcrap
#cloud
#cloudflare
#datacollection
#debloat
#deezer
#delete
#deodex
#disablecaptiveportal
#disablecomponents
#disablegoogle
#discord
#dns
#dnscrypt
#dontask
#e
#exodus
#facebook
#fakegapps
#faq
#fdroid
#fennec
#findyourphone
#gcam
#gmail_signin_error
#googlefi
#googletakeout
#gpslock
#graphene
#grapheneos
#gratisapps
#guide
#ipsum
#librechair
#lineagemicrog
#location
#logs
#madaidan
#magicgapps
#magisk
#mailalias
#manjaro
#microg
#mixplorer
#netoff
#news
#nitrokey
#notes
#nothingtohide
#osm
#ot
#playgames
#playpaid
#problems
#pushnotifications
#qpatch
#rh01
#riot
#safetynet
#satstat
#searchengines
#shelter
#signal
#signaturespoofing
#sigspoof
#smalipatcher
#spite
#sync
#tgclients
#todolists
#tor
#torfud
#uber
#uncensorISP
#unlppatch
#untracklinks
#vanced
#vpn
#wear
#wiki
#windows
#wireguard
#withoutgoogle
#xiaomi

#discord goes full #censorship against discordant opinions

Discord : Our Community Guidelines now officially prohibit misinformation and disinformation
https://discord.com/guidelines

Music Industry Flags Discord and Reddit as Primary Piracy Threats

International music industry group IFPI has submitted its recommendations for the EU's upcoming 'Counterfeit and Piracy Watch List’. As expected, the report flags YouTube rippers, cyberlockers and torrent sites. However, messenger platforms and social media sites such as Dickcord, Reddit, Telegram and Twitter, are also seen as top enforcement priorities.

https://torrentfreak.com/music-industry-flags-discord-and-reddit-as-primary-piracy-threats-220405/
#discord #reddit

Quiet

Encrypted p2p team chat with no servers, just Tor.

https://tryquiet.org/index.html

https://github.com/TryQuiet/quiet

Currently in developpement stage so be cautious of your data

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In Quiet, all data syncs directly between a team's devices over Tor with no server required.

No email or phone number required, Unlike #Slack, #Discord, #WhatsApp, #Telegram, and #Signal, no email or phone number is required to create or join a #community.

End-to-end encryption, All data is #encrypted end-to-end between member devices, using Tor.

Channels, Organize chats in Slack-like channels, so conversations don't get messy.

Images, Send and receive images, with copy/paste, drag & drop, and image previews.

Files, Send and receive files of unlimited size!

Notifications, Invite links, Keyboard controls, Desktop apps

Android, Quiet works on Android, and F-Droid support is on the way.

#E2E #Chat #Quiet #Tor