[Suggestion] Make verified RPC or close RPC only for verified games/applications
I discussed on reddit that RPC is another threat for security in its current form.
Why? You ask:
1. You can just advertise any Server/Webseites ( scam and phishing discords )
2. You create a loophole for auto moderation
A hacked account dont post the discord invite in the channel it just says something random and in the end: "hey if you want free nudes click on the activity what i am have rn"
and so you created a loophole for auto moderation to not detect any malicious links / invites or rather blocked invites and many of the third party security bots doesnt scan for the activity that i know.
I hope you can understand the somewhat security threat in the RPC and because of that i would like to change how RPC is done, more secure, more authentic and no fake RPC.
What could be changed:
1. Instead of open api every App gets an RPC-API Token in the developer portal
2. Make like a verification system like in the bots where a check is in the top corner or in the name.
Thanks for reading this through.
P.S. Yes i know there wasnt any high count of phishing bots or else harmfull content with RPC but if we wait there will be some cases in the future with furthermore auto moderation blocken harmfull links in messages and so on.
Please sign in to leave a comment.