News for hackers. Stuff that matters.

A comment on /story/34302150.

Re: by meowtastic on Monday January 09, 2023 @03:02PM (#34315217)
Didn't know Discord doesn't encrypt messages. How do you go about doing it then? If I send a message, wouldn't it automatically go to Discord's server?
[ Parent | on HN ]
Re: by brianjking on Monday January 09, 2023 @07:23PM (#34318544)
Just wait until you find out your Discord token is stored in plaintext in your browser, and if you have it compromised it bypasses your 2FA and password.
[ Parent | on HN ]
Re: by discryptor on Tuesday January 10, 2023 @06:30PM (#34332968)
That is indeed another vulnerability of Discord.

Discryptor doesn't even require you to be logged into your Discord account (except for the authentication every now and then).

[ Parent | on HN ]
Re: by discryptor on Tuesday January 10, 2023 @06:21PM (#34332907)
Nope, it gets encrypted in the Discryptor client first, then sent to the Discord bot, which forwards the encrypted message it to the recipient.
[ Parent | on HN ]