Discord won't fix the invisibility bypass CVE, so I made a PoC

https://greasyfork.org/en/scripts/564154-discord-invisibility-bypass

by xmrcat • 6 months ago

9 2 6 months ago

KomoD• 6 months ago

I honestly think it's funny to even submit a CVE for this.

But if you are so concerned about privacy to the point where someone knowing you are online on Discord is such an issue, you probably shouldn't be using Discord in the first place, it's not exactly a privacy-focused platform.

Also reading the linked blog post

Discord moved to a private, invite-only bounty and ghosted my report for over 100 hours, violating the 24h promise on their own page

Their own page never promises to respond in 24h, in their own words: "Vulnerability reports will always be responded to as fast as possible—usually within 24 hours."

"usually" doesn't mean they promise to respond in 24h, not immediately getting a reply doesn't mean you are being ghosted either.

AuthAuth• 6 months ago

0 day attack on the terminally online.

Discord won't fix the invisibility bypass CVE, so I made a PoC

Related Stories