Add a server setting to disallow private messages to users

Opmerkingen

124 opmerkingen

  • Kefka

    Thank you gk, that clears things up.

    1
  • bottiger

    Youre the one that said the bot having a valid phone number could have been how it was able to spam. If discord says that highest moderation also waits the 10 min, then a phone number alone would not be enough to be able to initiate a new DM by their own rules. 

    Look I don't really know exactly how the discord system works. Point is that it is completely broken and could have been fixed by adding a permission to block non-admins from pming people on the server.

    1
  • gk

    > Point is that it is completely broken

    Like many things in discord, sadly.

    Their documentation occasionally being out-of-date (or just plain wrong) doesn't help either.

    1
  • Kefka

    For sure it is a long time issue that needs way more attention, and the permission suggested in this thread would fix it, but there IS a working solution people can use in the meantime. It hasn't been fixed in 3 years and it likely won't be any time soon. Just change your moderation setting from higest to high. The bots will likely automate the ability to react and get a role like they did on my server. If and when that happens, try switching to a captcha verification.

    -2
  • bottiger

    Kefka

    I just went and looked at the settings. Set moderation to high, not higest. Phone verification drops the 10 min restriction, which breaks the whole thing. So there *was* something wrong with your setup.

    Seems like this verification level blocks people from reacting to messages as well, which means the only way you can verify is to pm the user a captcha. This seems like a huge roadblock for legitimate users.
    1
  • Kefka

    Users should be able to click pre-existing reactions without permissions. They just cant add new reactions without the permission. The moderation setting shouldnt effect this unless something has changed. I have been using a captcha for a long while now, so I cant be sure without testing it myself.

    0
  • bottiger

    I just tested it myself with a test account with a valid email.

    Verification level high, I couldn't react.

    Verfication level low, I could.

    0
  • Kefka

    If thats the case, thats unfortunate. Youll have to either switch to a DM verification method, or deal with the spam.

    0
  • Kefka

    You could try giving @everyone the add reaction permission in your landing channel. It would allow them to add new reactions too, but it might bypass your issue.

    0
  • Twisted_Code

    wow, this thread has been busy
    so I do have a question about your issue bottiger: If you are not giving unverified users roles, why not make it so the the verification role can hide the verification channel and show the rest? That way only admins and unverified users will be visible in the verification channel's user list. I know a Minecraft server owner that did this with his community and it seemed to work pretty well. It's worth a try. The only reason I haven't done this yet on my own server is laziness and the lack of an immediate need (my server isn't big enough for spammers to care apparently :-( ), so unfortunately I can't easily show you a role list to demonstrate it, but in theory at least, it should work.

    -3
  • Kefka

    That wont work with all bots, Twisted_Code. It is possible to find users even if you dont share a channel with them. Speaking from experience here. If you wanna prove it to yourself, set up a test account and then set up channels as you described. Then just hit ctrl + K and type in the name of a user you shouldnt be able to see. I tried this same idea loooong ago and the bots were able to DM spam anyway.

    1
  • bottiger

    Twisted_Code

    If you are not giving unverified users roles, why not make it so the the verification role can hide the verification channel and show the rest? 

    If you read my earlier comments, you will see that's the first thing I tried. Bots can see members that are hidden to users.

     

     

    1
  • BaK

    So much crap to try get rid of the scamming and spamming bots when all that's needed is an option for the servers to make clients BY DEFAULT block direct messaging for the individual server, an option any user can easily opt out of.

     

    Its so mind blowingly easy and obvious it's like discord doesn't want to tackle the spam bots because it adds to thier user count so significantly. 

    4
  • Its need to be in a popup when you enter new server.
    Option to enable DM from other users
    Default disabled.
    Vote it up ;)

    2
  • Jordi

    In my opinion it is CRITICAL this is a role based permission. Can someone from Discord clarify what is the plan please? thanks

    4
  • G4b1tz

    A workaround to this is to make it so DMs from server members are OFF BY DEFAULT and allow communication only from approved members AKA FRIENDS.

    0
  • softyoda

    It would be ideal to have permission called "Permission to send PM to other users"

    That you can disable to new user, for example, and enable to user with a role.

    Or that you can add to spammers (without banning them, sometime it's hard to know if spamming is real or fake screenshoot)

    2
  • softyoda

    Is this option that hard to implement in new discord code ? It's "just" a value in the database of roles. And some lines of codes.

     

    Just saying that.

    -1
  • Toster

    You can read users throught search and you dont need access to any channel to do it. I read about it and just tested it. Thats how they do it and thats why nothing works against it.

    1
  • bottiger

    Kefka

    So I have been using your suggestion, having verification level set to High and forcing people to solve a captcha to get a role. It blocked 2 bot waves.

    However today it failed. Some bots were still able to message our users even though it did not verify and did not have any roles and security level was set to high. This was also the only server they shared.

    0
  • Kefka

    Not sure what to say. That should be impossible and from my testing, it is. Did the users getting these accept friend requests from them or something? I know the moderation setting blocks new direct messages, Ive tested it plenty. The bots are using normal user accounts to spam, so they shouldn't be able to do anything we cant.

    0
  • bottiger

    No they didn't accept friend requests. Can you even send friend requests when they join a high security server?

    There is either a new exploit or discord screwed up. Either way even this solution isn't perfect, and its causing a lot of our new joiners to leave our server.

    0
  • Kefka

    Yes, they can send friend requests. I dunno what to tell you, man. For one, that account is almost 4 years old. Hard to believe is just a bot account that hasn't been banned this whole time. Something here is off. Can't say exactly what, but with this setup its literally impossible to start a new DM conversation without completing the captcha. There has to be *something* bypassing it.

    If you wanna send me an invite, I can join your server, test some stuff, and see if I can figure it out. No promises, but thats the best I can do.

    0
  • Seblor

    My server also got raided a couple times and the automated accounts did not have any role but were still able to instantly PM members (High verification level setting)

    0
  • bottiger

    Kefka

    My discord is https://discord.gg/skial . The bot did not get any roles I checked the audit log. The victim said he did not add the bot as a friend either.

    0
  • Kefka

    Found the problem for those reading. Bottiger had the built in discord rule agreement enabled. Apparently agreeing to the rules bypasses the moderation setting for starting a new DM conversation, even if they recieved no role.

    0
  • Milo

    Nelly

    Was this ever done? 
    Was anyone able to actually figure out a way to make this happen yet?
    "Members can send and recieve messages with the admins, but not to each other"

     

    0
  • Eugen

    This is still not solved? XD

     

    Discord pls

    1
  • 𝙼𝚘Ⓐ 𝑀𝑜𝓇𝒶𝓃

    make the server option to change the default value of this for new users

    3
  • BaK

    Exactly, so easy for them to implement.

    1

U moet u aanmelden om een opmerking te plaatsen.