News for hackers. Stuff that matters.

A comment on /story/34302150. Parent comment

Re: by brianjking on Monday January 09, 2023 @07:23PM (#34318544)
Just wait until you find out your Discord token is stored in plaintext in your browser, and if you have it compromised it bypasses your 2FA and password.
[ Parent | on HN ]
Re: by discryptor on Tuesday January 10, 2023 @06:30PM (#34332968)
That is indeed another vulnerability of Discord.

Discryptor doesn't even require you to be logged into your Discord account (except for the authentication every now and then).

[ Parent | on HN ]