Hidden channels being exposed by BetterDiscord
Hidden Channels exposed by BetterDiscord – Discord
is a one of the first posts complaining about this issue. A BetterDiscord plugin can easily leak information from hidden channels such as name and topic. Even if hiding its content (because it's impossible), it is scandalic enough.
-
Solution: don't store private info in channel names and or topics
Those properties aren't private, and you shouldn't expect them to be
Bots need to know all of the existing channels for input and such, not really sure why they would need channel topics but nonetheless, you shouldn't try to hide sensitive info in either
This is like trying to hide passwords in roles, normal users can't see them, but bots & people doing either api requests, or using client mods can. Should we also hide roles from all end users?
0
Iniciar sesión para dejar un comentario.
Comentarios
1 comentario