Post

Hackers steal millions of Discord IDs and email addresses in "deliberate, multi-stage attack" on security service Double Counter https://bit.ly/3Vy6WtM

The headline/lede on this is very misleading, this is an entirely unrelated third-party service which claims to secure Discord servers (... by apparently harvesting their user's information and selling it?...), not a service that is run or used by Discord itself.

Wow, look at the list of all the things that changes:

It's the difference between "Discord fucked up" and "this third party service for Discord you have to opt in to using fucked up". People can and should be mad at Discord, but you can only come at them over things they actually do or else your anger will not help affect change.

Yeah, like, discord is only at fault for trusting these guys, not what said guys did

Discord didn't trust these guys. Discord didn't give them anything. It's a third party that operates moderation bots in individual servers.

No matter how you slice it, Discord is still responsible for fuckups like this. They allowed the third party service onto their app, and they failed to provide trustworthy security to begin with. If you don't hold it against them at all Discord will continue to be a platform that allows this.

No, they're not. Not in these cases. This is a third party that Discord users had to agree of their own accord to hand their data over to, and send it fully outside of Discord. If I DM you and ask for your credit info, and you decide to give it to me, Discord is not responsible for that.

Discord would be responsible for that too actually, which is why you can report spam. They're not the cause of the problem, but they have control over the solution. That's where the responsibility comes from.

why is discord responsible for providing security for third party apps. if i made a website where you could make posts and they'd appear on a bluesky account, would bluesky be responsible for managing my website's security?

Bad comparison. Sony would be responsible if a PS5 game collected your data, sold it, and then got hacked and it was all leaked. Why do we have to constantly watch over our shoulders when they're the ones with all the tools to stop it? What happened to "with great power comes great responsibility"?