Technology

55744 readers

6103 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

360

The data of 760,000 Discord.io users was put up for sale on the darknet (stackdiary.com)

submitted 10 months ago* (last edited 10 months ago) by skilledtothegills@lemmy.world to c/technology@lemmy.world

9 comments fedilink hide all child comments

An unidentified individual has listed the data of 760,000 Discord.io users for sale on a darknet forum. This discovery was brought to light by the "Information Leaks" Telegram channel, associated with the Russian service for tracking vulnerabilities, data leaks, and monitoring fraudulent online resources.

For clarity, Discord.io is a third-party interface tailored for the widely-used Discord messenger. The offered database comprises details like email addresses, hashed passwords, and other user-specific data.

you are viewing a single comment's thread
view the rest of the comments

[–] originalfrozenbanana@lemm.ee 22 points 10 months ago (1 children)

Depending on how that authentication handshake is implemented secrets can be leaked. It could be a security flaw on Discord’s side that Discord.io has access to via SSO, or it could be that Discord.io stores username and password for some reason.

[–] ipkpjersi@lemmy.ml 1 points 10 months ago* (last edited 10 months ago)

Yeah but there's a big difference between tokens that can easily be revoked and what could be potentially plain-text passwords.

edit: Okay, so it sounds like they had their own account system back in 2018 separate from Discord. That makes more sense.