Arc Raiders was accidentally recording Discord conversations into an unencrypted local game file — vulnerability in SDK could log messages and credentials in plaintext
www.tomshardware.com
Thankfully, the issue has since been hotfixed by Arc Raiders, but the fault still lies with Discord

Remember you can trust Discord with your driver’s license for verification, I’m sure they won’t accidentally store them in a plain text open API call or anything.

  • chirospasm@lemmy.mlEnglish
    45·
    1 day ago

    Issue seems to be with Discord’s SDK, not Embark. Good on Embark responding quickly by patching something Discord should be responsible for, though.

    • poke@sh.itjust.worksEnglish
      292·
      24 hours ago

      Well… They quickly patched it when it went public. It was reported to them a month ago.

      • fahfahfahfah@lemmy.billiam.netEnglish
        14·
        23 hours ago

        Based on a post from him he had difficulty actually getting to their bug bounty report system, which is hosted by another company. So sounds like until it was made publicly they hadn’t actually received the report