Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Unlocking Discord Nitro features for free

blog.0x7d0.dev

Post reply on HN
Print view View original

91–100 of 145 posts

Re: Unlocking Discord Nitro features for free

#91

Post by matheusmoreira »

toastal wrote: post #84
matheusmoreira wrote: post #57

Earlier quoted context omitted.

Everyone having WhatsApp turned out to not be so bad. It has end-to-end encryption just like signal. Proven in courts.

There’s issue with metadata & the requirement of sharing one’s address book to use WhatsApp. I wouldn’t be surprised if it too like Signal required users have a Android/iOS primary device & a phone number or you can’t use the service which has privacy implications but also feeds the mobile OS duopoly as you can’t choose another OS (or to just not have a phone).

It does require a phone number. Alternative clients are banned by terms of service which means you can only choose the platforms they support which means iOS or Android.

Re: Unlocking Discord Nitro features for free

#92

Post by can16358p »

laserbeam wrote: post #6

I get that some themes would be enabled this way, but for them to decide streaming quality with a client side check instead of a server side one is quite baffling.

Especially given the fact that they could simply inspect bitrate in/out, they don't even need to access the actual video, it can be fully encrypted (even if not ATM) and by examining how much data is transferred they can know which quality they are streaming at.

Re: Unlocking Discord Nitro features for free

#93

Post by LordShredda »

userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

Discord has a habit of making it work, then fixing it later. Additionally, how many people are going to bother to pirate themes and high quality screen sharing?

Re: Unlocking Discord Nitro features for free

#94

Post by panki27 »

kkarakk wrote: post #74
userbinator wrote: post #8

Earlier quoted context omitted.

Perhaps closer to "cracker", but I agree that this is the sort of knowledge that the corporates don't want us to know --- so they can attempt to squeeze more $$$ out of us without resistance.

the only people who use the term cracker are people trying to critique the ethicality of hacking.

I disagree. Cracking is, historically speaking, the act of circumventing copy protection mechanisms. So to me, cracking is one of the disciplines of hacking.

Re: Unlocking Discord Nitro features for free

#95

Post by ThatPlayer »

Jnr wrote: post #45
userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

It doesn't really matter if they check it or not, I had Nitro for a year during pandemic because I thought I could stream in higher quality. In reality the quality was just as bad, and sometimes video looked very pixelated. I have gigabit connection at home and a good GPU that does the encoding but I guess Discord doesn't have any servers near me (~1900km to Rotterdam) and it might be prioritizing low latency. The ex…

I believe Discord's streaming limits itself based on the connection to your viewers as well as their decoding capabilites, because Discord itself doesn't do any transcoding.

For example with AV1, if someone joins without an AV1 decoder, it fallbacks to h264: https://twitter.com/gerdelgado/status/1618285964308402180

Re: Unlocking Discord Nitro features for free

#96

Post by SamuelAdams »

mythz wrote: post #63
berbec wrote: post #15

Earlier quoted context omitted.

For those to lazy to run base64 --decode, here's the result: // Here's a cake if you thought about inspecting the code before executing it: let css = 'font-size: 36px; font-weight: bold; color: red'; console.log("%cNEVER paste code you don't understand into the development console.", css); console.log("%cThis is the best way to compromise your account.", css);

> For those to lazy to run base64 --decode, here's the result: Or just strip the eval and use JS's native base64 decoder: atob(base64)

CyberChef has been my go to for a while for this sort of stuff. Easy to use GUI, can stack multiple commands fairly easily.

https://gchq.github.io/CyberChef/

Re: Unlocking Discord Nitro features for free

#97

Post by rollcat »

ivraatiems wrote: post #12
userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

I suspect it's less they thought "this is a great implementation" and more "if people figure out how to break it, we'll patch it." This is the first time in several years of using Discord that I've heard of anyone even trying to circumvent their access/permissions structure for Nitro, so I see no reason why they'd bother unless this was widespread.

Most people don't realise you can plug almost any HLS URL into ffmpeg and trivially rip the stream. Most live streams don't bother with DRM because it's expensive, fragile, and user-hostile. It's often difficult enough to get the motion picture to display properly at all, let alone with acceptable resolution, latency, and artefact-free. The smart companies prioritise UX over policing the "high tier" features.

Re: Unlocking Discord Nitro features for free

#98

Post by ZeroZeroOneZero »

panki27 wrote: post #94
kkarakk wrote: post #74

Earlier quoted context omitted.

the only people who use the term cracker are people trying to critique the ethicality of hacking.

I disagree. Cracking is, historically speaking, the act of circumventing copy protection mechanisms. So to me, cracking is one of the disciplines of hacking.

A lot of people I've met that reverse malware for a living started out cracking copy protections. It's basically the same skill set. The old SnD forums had an entire section dedicated to it. They even had decompiled Stuxnet samples before anyone really knew what a Stuxnet was.

That entire scene is people just wanting to break protections for the challenge. Not necessarily just copy protections. The InfoSec, and RCE worlds in general, would not be where it is today if it wasn't for them cracking those old games and whatnot.

Re: Unlocking Discord Nitro features for free

#99

Post by paxys »

chefandy wrote: post #28
userbinator wrote: post #7

Currently, Discord doesn’t appear to validate on their servers whether the stream being transmitted truly adheres to the criteria of a non-subscribed user I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake.

> I wonder who thought that would be a good implementation. Client-side validation seems like a very novice mistake. As someone who only sends up PRs containing complete features in their final state implemented exactly as I hoped, I have no idea. Unrelated aside: just started my fifth new job this month. I never seem to jibe with project managers.

If everywhere you go smells like shit...

Re: Unlocking Discord Nitro features for free

#100

Post by notpushkin »

toastal wrote: post #84
matheusmoreira wrote: post #57

Earlier quoted context omitted.

Everyone having WhatsApp turned out to not be so bad. It has end-to-end encryption just like signal. Proven in courts.

There’s issue with metadata & the requirement of sharing one’s address book to use WhatsApp. I wouldn’t be surprised if it too like Signal required users have a Android/iOS primary device & a phone number or you can’t use the service which has privacy implications but also feeds the mobile OS duopoly as you can’t choose another OS (or to just not have a phone).

You can use WhatsApp without sharing the address book by using wa.me links instead (e. g. wa.me/+12345556789) to start chats. Still sucks though.
Post reply on HN