Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Unlocking Discord Nitro features for free

blog.0x7d0.dev

Post reply on HN
Print view View original

11–20 of 145 posts

Re: Unlocking Discord Nitro features for free

#11

Post by toastal »

janosd wrote: post #9
viraptor wrote: post #3

Earlier quoted context omitted.

Discord is happy to ban people for anything. They even stop people for using alternative clients. If you care about your account, do not mess with discord.

I got banned directly after signup. I got an email 1 second after signing up that I violated the community guidelines. The algorithm didn't like my Firefox/uBlock Origin combo I guess. Now my phone number is tainted and I can't make an account anymore. Oh well, no Discord for me I guess. (They really are very trigger-happy.)

All project maintainers: take notes on why your community shouldn’t be built around Discord’s service. Bridge to it only if you must, but don’t make it the primary chat option.

Re: Unlocking Discord Nitro features for free

#12

Post by ivraatiems »

userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

I suspect it's less they thought "this is a great implementation" and more "if people figure out how to break it, we'll patch it." This is the first time in several years of using Discord that I've heard of anyone even trying to circumvent their access/permissions structure for Nitro, so I see no reason why they'd bother unless this was widespread.

Re: Unlocking Discord Nitro features for free

#13

Post by zebracanevra »

userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

Non-nitro users can stream in 1080p60, all they have to do is join a "boosted" server.

Which is very easy to do - you can find tons of freely joinable 'official' servers for games, which are boosted, and then join one of the available voice channels.

Re: Unlocking Discord Nitro features for free

#14

Post by rise-remold »

userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

It's because this isn't a Discord API component, this is their "voice" server of which they have hundreds deployed across the world.

Their voice server only checks with the API to verify if you're allowed to join. Beyond that, it becomes a one-to-many packet broadcaster.

Re: Unlocking Discord Nitro features for free

#15

Post by berbec »

its_a_random_ac wrote: post #5

I'm not accusing the author of doing this, but providing a simple base64 encoded blob at the end to run to enable everything would be a pretty easy attack vector, wouldn't it? edit: just decoded it and touché

For those to lazy to run base64 --decode, here's the result:

// Here's a cake if you thought about inspecting the code before executing it:

let css = 'font-size: 36px; font-weight: bold; color: red';

console.log("%cNEVER paste code you don't understand into the development console.", css); console.log("%cThis is the best way to compromise your account.", css);

Re: Unlocking Discord Nitro features for free

#16

Post by dejawu »

userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

It's also possible to see the names, topics, and timestamp of the last message of hidden channels through their API. The channels are only hidden on the client-side. (To be clear, it's still not possible to view the contents of these channels.)

Re: Unlocking Discord Nitro features for free

#17

Post by mdwalters »

viraptor wrote: post #3
deevus wrote: post #2

It rightly warns that you could get banned for using these tricks, but is there any precedent for Discord banning users for this kind of thing?

Discord is happy to ban people for anything. They even stop people for using alternative clients. If you care about your account, do not mess with discord.

I used gtkcord4, and I didn't get banned. I used Vencord, didn't get banned either. Of course, I wouldn't reccommend using any of these for the saftey of your account, as I was dumb back then and never learned about the risks.

---

Also, one Discord alternative I would reccommend is Revolt[1]. Great community, and was famous for being featured in a No Text To Speech video (and my friend's server had a brief cameo too!), and it's adoption of discriminators (i.e. randomguyabcd#5408).

[1]: https://revolt.chat/

Re: Unlocking Discord Nitro features for free

#18

Post by ghosty141 »

viraptor wrote: post #3
deevus wrote: post #2

It rightly warns that you could get banned for using these tricks, but is there any precedent for Discord banning users for this kind of thing?

Discord is happy to ban people for anything. They even stop people for using alternative clients. If you care about your account, do not mess with discord.

Iirc there is no confirmed instance where people got banned for using an alternative client.

Re: Unlocking Discord Nitro features for free

#19

Post by nextlevelwizard »

userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

Considering how loosely people (especially kids) these days spend money, maybe this is good enough? How many people who understand how to do these hacks and would be willing to pay for Nitro are there? I am sure there are thousands of not tens of thousands of users for all these different Discord client mods that enable all or some of the Nitro features, but would there be any actual revenue from fixing this?

In my opinion paying the $10/mo (if I needed/wanted the features) is way less hassle than trying to keep on top of the mods, which probably break at every Discord update, and then hope the maintainers don't slip in exploits.

Post reply on HN