Discord should be taking a stronger stance against the phishing and malicious attacks on communities.

The amount of phishing and malicious links being distributed on Discord servers is beyond bad. Every large community is plagued by them.

I've written in to Discord support, tried outreach, raised awareness of this being a Discord issue, etc. Discord needs to take responsibility for the fact that people are being targeted on their platform and they are the only ones who can create a reasonable solution for it. The idea that it's up to us to stop InfoSec related threats without being provided tools, or making it the problem of our individual community members is not an acceptable response.

My favorite example was when someone who had not received access to our server through our gatekeeper solutions (plural) was able to use @ everyone in almost every channel (20+ channels) within a 5 second period with malicious links. It wasn't a person copy/pasting, and they had no permissions to do @ everyone in any channel. It was an automated action that circumvented existing permissions, for a person who had no role to actually view the channels they were posting in.

There is no way that we can assuredly keep our community members safe. We haven't been given the tools or the ability to take action without creating a severe barrier-to-entry for incoming community members that would harm the community.

These are tech-centered problems that need tech-centered solutions from the devs at Discord, no one else can assure the safety of the communities that they host and provide for.

SnaPSadge

2021年11月11日 16:17

I've been the victim of a Phishing attack and honestly, it shows how useless this company is every aspect of the company is honestly appalling I don't know what's worse their lame excuse for customer service or the current state of this application when it comes to malicious content being pretty much everywhere. I email the support team about my issue and provide compelling evidence that proves that my account has been hacked including the email showing that my accounts email address has been changed, images from my friends receiving an email hack attempted as well as a blatant ransom attempt and the attacker who has possession of my account owning up to hacking my account. Yet its been 6 days currently and still no reply from this useless company honestly how useless is your customer support like come on man please actually respond and solve this issue do they even have logs of what my account is doing because I'm sure they can just check my account and clearly see a behaviour change like Jesus if i could rate their customer support they would even get a single star.

評論