Th3D3k0yMar 6

Arc Raiders was accidentally recording Discord conversations into an unencrypted local game file

https://lemmy.world/post/43920272

Arc Raiders was accidentally recording Discord conversations into an unencrypted local game file - Lemmy.World

Remember you can trust Discord with your driver’s license for verification, I’m sure they won’t accidentally store them in a plain text open API call or anything.

Show threadAielman15Mar 6
How do you “accidentally” record other people’s conversations?
Show threadshiningheroMar 6
If I’m reading it right, it’s kinda like how that one guy “hacked” 70,000 robot vacuums. Bad scope limits. Game uses token to do the rich presence stuff, and instead of just getting a confirmation back, it gets everything.
Show threadDreamButtMar 6
So in other words rich presence shares your conversations with game makers
Show threadQuetzalcutlass
Not necessarily. You choose what permissions your token has when you register it with Discord. In this case the game asked for an auth token with all permissions, so the game connects to Discord with the same access levels as your actual login.
Mar 6 at 3:16pmWeb
Show threadDreamButtMar 6
Yeah that’s what the person before me said. I’m saying that the fact it’s possible at all is a horrible violation of privacy
Show threadArmok_the_bunnyMar 7
There are legitimate reasons to ask for an “all permissions” token, such as setting up and using a third party client. A game is not one of the things that should be asking for that though.
Show threadtuxiqaeMar 7
But the fact that you have no control (or transparency) over that matter is atrocious
Show threadBlackmistMar 7
In any case it sounds like a reason to actually read what the oauth login screens are actually telling you…