Comment on Arc Raiders was accidentally recording Discord conversations into an unencrypted local game file

Aielman15@lemmy.world ⁨1⁩ ⁨day⁩ ago

• shininghero@pawb.social ⁨1⁩ ⁨day⁩ ago

  If I’m reading it right, it’s kinda like how that one guy “hacked” 70,000 robot vacuums. Bad scope limits. Game uses token to do the rich presence stuff, and instead of just getting a confirmation back, it gets everything.

  source

  • tdawg@lemmy.world ⁨1⁩ ⁨day⁩ ago

    So in other words rich presence shares your conversations with game makers

    source

    • Quetzalcutlass@lemmy.world ⁨1⁩ ⁨day⁩ ago

      Not necessarily. You choose what permissions your token has when you register it with Discord. In this case the game asked for an auth token with all permissions, so the game connects to Discord with the same access levels as your actual login.

      source

      • tdawg@lemmy.world ⁨1⁩ ⁨day⁩ ago

        Yeah that’s what the person before me said. I’m saying that the fact it’s possible at all is a horrible violation of privacy

        source

        • -> View More Comments
• Master167@lemmy.world ⁨1⁩ ⁨day⁩ ago

  By being a bad security actor when asking permission and giving permission.

  source