Maybe the dipshits who host the updated GoXLR firmware and software solely on Discord will finally take the advice to put it somewhere where it actually makes sense, like on their own fucking website where it should be.
Seriously, I don't know why people are so obsessed with creating pointless discord servers. Is it really that hard to host files elsewhere?
I have one for my friends, (I know, I know, matrix), and that's how I think discord should be used. It's original purpose, friends hanging out. Now it's every megacorp has a discord server and all their fans just fawn over them there. Pass for me, I just want voice and text chat with friends.
(I know, I know, matrix)
Getting people that you want to talk to -- friends, family, etc -- onto is a new platform is so difficult. No one wants to have 10 different communications apps, plus associated accounts*, just so they can talk to one or two people on each. It's the network effect. It also doesn't help that some of these platforms just aren't as convenient or easy to use, especially for non-tech people.
But yeah, so many of these communities make no sense on Discord (or live chat period; IRC suffered from this too). I think troubleshooting is the worst, especially in larger, active communities. You have different conversations going on, so it's easy to miss questions or answers. Plus, Discord's search isn't great, IMO. Better than reddit, but that's not saying much. So someone probably asked the same question some time ago; good luck finding it, and even if you do, you still have to sift through the adjacent chat history to see if others responded and track that conversation.
Larger Discords remind me of the chats of large Twitch streamers, where the chat is going a million miles per hour. What's even the point?
At least with a forum, it's much slowed down, and there are clear divisions between topics, that give people the space to discuss those topics.
Websites are so easy to make these days, too. No coding experience even needed. I'm not saying Discord is worthless; it's not and I use it plenty everyday. But it has its place. People need to use the right tools for the job.
*In many ways, websites suffer this issue, too. I have to make an account on this standalone separate website, just for my one question, and then after it gets answered, I'll probably never go back to it? That's why reddit (and Lemmy to a lesser extent) is so popular.
I don't understand how people hang out in these places. It just doesn't seem like a system conducive to discussion. The forum/link aggregator format works much better imo
For large groups absolutely, chat moves so fast that there's no way that it can mean anything. Trying to get help in a gaming discord is just terrible.
However for a small group of friends it's great, using discord for what it was meant to be used for (chatting with friends about games, setting up gaming nights, voice chat) is perfect.
Unfortunately seems like this won't help that, if they expect you to be on the server to get the files. The article says the links will be auto refreshed daily, so it's only the links shared outside the server that won't work after a day :(
FUCK. You’re probably right. It’s such a ridiculous thing they make us go through just to get updated installers. Last I checked they don’t even make it obvious what the commands are to get the download links, you have to ask for them in chat and wait for someone to eventually reply back with them. It’s so annoying, they could just put the installers on the website next to the outdated one that’s been there forever.
I feel the same way. I end up being in 30 or so different Pokemon ROM hack servers just to get the patch files for the games. Very frustrating to have to do that when there are websites dedicated to hosting these files
Just progressing backwards in ease of access for no good reason.
This is a very sensible change. It's an open secret that discord has been leveraged by hackers for quite some time. You can even search Github and find examples where exfiltration of data is done via discord. Discord is not a file host and should not be used as such. I'm just glad they're doing it in such a way to minimize the impact on users and devs.
I don't know how much of a difference it will make.
It's easy to host files. Even if the malware "author" is clueless and just buying a customizable malware, either they'll figure out how to host files or file hosting will be provided along with the service they're buying.
It may not stop Discord from being the file host either. Malware distributing bot accounts could keep copying a new link to the file, or could upload a new version of the file on demand.
Discord can't expire webhooks the same way so webhooks will continue to be used for exfiltration. Pointing out that it's used for exfiltration as if it were related seems like bad reporting. It's a difficult problem because if they did break webhooks it'd only make things more difficult for legitimate users. These malware packages usually hijack the user's Discord installation and could send out the information as the user without using webhooks.
It's not as bad as the title - read the TLDR.
It's a resonably sensible change. I wouldn't be surprised if they extend it to images etc (on a longer timescale) as I keep seeing people hosting images off discord...
I don’t understand people using Discord, Twitter or Facebook links to share images. MF it will expire in a day.
Half the time when I click an image link hosted on Discord, it turns out to be a dead link. I hope this new policy will help make them dead-er so people can finally stop using them. Discord isn't Imgur, Jesus.
Oh so the files will still be hosted by discord, just the url to then will be changed every day. That makes a lot more sense but also locks you more and more into discord. Although I suspect if you are hosting meaningful files on discord then you don't care about vendor lock in.
If you're hosting meaningful files on Discord, you need a better hosting solution. Discord isn't meant for large-scale file sharing.
I agree but I know a few operations that would suffer from discord actually removing files from storage after 24 hours.
Images are files and are affected.
I guess so, it depends how they are treating them though. Image files (probably) are not being used to distribute malware and are going to create a lot more dead links.
Is this change live? We could probably test it. (Re read the article - not yet)
It's been partially live for weeks. If you copy a link to a file, including images, the link has the new parameters on it.
🤖 I'm a bot that provides automatic summaries for articles:
::: spoiler Click here to see the summary
The company told Bleeping Computer that doing so will help the company fight malware spreading on its platform since that gives it more ability to “restrict access to flagged content.”
According to the article, Discord says the change won’t affect anyone sharing content on the platform, as links within the client will be refreshed automatically.
However, links shared outside of Discord won’t work a day after they’re regenerated.
The company said that it will share more “in coming weeks” with developers, who “may see minimal impact.”
As Bleeping Computer notes, cybersecurity company Trellix reported it had “found around 10,000” malware samples distributed online that were stored on Discord’s content delivery network (CDN).
Attackers, Trellix wrote, use the platform’s webhooks to pull data from victims’ computers and drop it into Discord channels run by the attackers.
Saved 18% of original text.
:::
I've looked around malware link scrapers (ex. URLhaus) before, and I recall seeing that a large portion of the malware links were hosted on Discord, especially trojans. Although it will break a lot of legitimate shared files, I respect them for fixing this security issue
Maybe the dipshits who host the updated GoXLR firmware and software solely on Discord will finally take the advice to put it somewhere where it actually makes sense, like on their own fucking website where it should be.
Seriously, I don't know why people are so obsessed with creating pointless discord servers. Is it really that hard to host files elsewhere?
I have one for my friends, (I know, I know, matrix), and that's how I think discord should be used. It's original purpose, friends hanging out. Now it's every megacorp has a discord server and all their fans just fawn over them there. Pass for me, I just want voice and text chat with friends.
Getting people that you want to talk to -- friends, family, etc -- onto is a new platform is so difficult. No one wants to have 10 different communications apps, plus associated accounts*, just so they can talk to one or two people on each. It's the network effect. It also doesn't help that some of these platforms just aren't as convenient or easy to use, especially for non-tech people.
But yeah, so many of these communities make no sense on Discord (or live chat period; IRC suffered from this too). I think troubleshooting is the worst, especially in larger, active communities. You have different conversations going on, so it's easy to miss questions or answers. Plus, Discord's search isn't great, IMO. Better than reddit, but that's not saying much. So someone probably asked the same question some time ago; good luck finding it, and even if you do, you still have to sift through the adjacent chat history to see if others responded and track that conversation.
Larger Discords remind me of the chats of large Twitch streamers, where the chat is going a million miles per hour. What's even the point?
At least with a forum, it's much slowed down, and there are clear divisions between topics, that give people the space to discuss those topics.
Websites are so easy to make these days, too. No coding experience even needed. I'm not saying Discord is worthless; it's not and I use it plenty everyday. But it has its place. People need to use the right tools for the job.
*In many ways, websites suffer this issue, too. I have to make an account on this standalone separate website, just for my one question, and then after it gets answered, I'll probably never go back to it? That's why reddit (and Lemmy to a lesser extent) is so popular.
I don't understand how people hang out in these places. It just doesn't seem like a system conducive to discussion. The forum/link aggregator format works much better imo
For large groups absolutely, chat moves so fast that there's no way that it can mean anything. Trying to get help in a gaming discord is just terrible.
However for a small group of friends it's great, using discord for what it was meant to be used for (chatting with friends about games, setting up gaming nights, voice chat) is perfect.
Unfortunately seems like this won't help that, if they expect you to be on the server to get the files. The article says the links will be auto refreshed daily, so it's only the links shared outside the server that won't work after a day :(
FUCK. You’re probably right. It’s such a ridiculous thing they make us go through just to get updated installers. Last I checked they don’t even make it obvious what the commands are to get the download links, you have to ask for them in chat and wait for someone to eventually reply back with them. It’s so annoying, they could just put the installers on the website next to the outdated one that’s been there forever.
I feel the same way. I end up being in 30 or so different Pokemon ROM hack servers just to get the patch files for the games. Very frustrating to have to do that when there are websites dedicated to hosting these files
Just progressing backwards in ease of access for no good reason.
This is a very sensible change. It's an open secret that discord has been leveraged by hackers for quite some time. You can even search Github and find examples where exfiltration of data is done via discord. Discord is not a file host and should not be used as such. I'm just glad they're doing it in such a way to minimize the impact on users and devs.
I don't know how much of a difference it will make.
It's easy to host files. Even if the malware "author" is clueless and just buying a customizable malware, either they'll figure out how to host files or file hosting will be provided along with the service they're buying.
It may not stop Discord from being the file host either. Malware distributing bot accounts could keep copying a new link to the file, or could upload a new version of the file on demand.
Discord can't expire webhooks the same way so webhooks will continue to be used for exfiltration. Pointing out that it's used for exfiltration as if it were related seems like bad reporting. It's a difficult problem because if they did break webhooks it'd only make things more difficult for legitimate users. These malware packages usually hijack the user's Discord installation and could send out the information as the user without using webhooks.
It's not as bad as the title - read the TLDR.
It's a resonably sensible change. I wouldn't be surprised if they extend it to images etc (on a longer timescale) as I keep seeing people hosting images off discord...
I don’t understand people using Discord, Twitter or Facebook links to share images. MF it will expire in a day.
Half the time when I click an image link hosted on Discord, it turns out to be a dead link. I hope this new policy will help make them dead-er so people can finally stop using them. Discord isn't Imgur, Jesus.
Oh so the files will still be hosted by discord, just the url to then will be changed every day. That makes a lot more sense but also locks you more and more into discord. Although I suspect if you are hosting meaningful files on discord then you don't care about vendor lock in.
If you're hosting meaningful files on Discord, you need a better hosting solution. Discord isn't meant for large-scale file sharing.
I agree but I know a few operations that would suffer from discord actually removing files from storage after 24 hours.
Images are files and are affected.
I guess so, it depends how they are treating them though. Image files (probably) are not being used to distribute malware and are going to create a lot more dead links.
Is this change live? We could probably test it. (Re read the article - not yet)
It's been partially live for weeks. If you copy a link to a file, including images, the link has the new parameters on it.
🤖 I'm a bot that provides automatic summaries for articles: ::: spoiler Click here to see the summary The company told Bleeping Computer that doing so will help the company fight malware spreading on its platform since that gives it more ability to “restrict access to flagged content.”
According to the article, Discord says the change won’t affect anyone sharing content on the platform, as links within the client will be refreshed automatically.
However, links shared outside of Discord won’t work a day after they’re regenerated.
The company said that it will share more “in coming weeks” with developers, who “may see minimal impact.”
As Bleeping Computer notes, cybersecurity company Trellix reported it had “found around 10,000” malware samples distributed online that were stored on Discord’s content delivery network (CDN).
Attackers, Trellix wrote, use the platform’s webhooks to pull data from victims’ computers and drop it into Discord channels run by the attackers.
Saved 18% of original text. :::
I've looked around malware link scrapers (ex. URLhaus) before, and I recall seeing that a large portion of the malware links were hosted on Discord, especially trojans. Although it will break a lot of legitimate shared files, I respect them for fixing this security issue