Live data from Hacker News

Discord runs Powershell on load to find Nvidia binaries

twitter.com

11–20 of 57 posts

Re: Discord runs Powershell on load to find Nvidia binaries

#14
For those who don't want to piece together things from twitter, the summary is this:

Discord attempts to find nvidia-smi libraries by launching series of powershell scripts. Those scripts are really terrible with a lot of if-else logic based on hardcoded strings and environment variables. They are also apparently fairly slow and scan over 800 directories.

Honestly, this is just yet another example of Discord not really developing their software well security-wise.

Another example bad security example: 2FA implementation is not really that secure since you can continuously ask for backup codes to be sent to your email which you presumably open frequently on the same PC (there is already automated malware that will abuse this and circumvent your 2FA via newly generated backup codes).

Yet another terrible implementation: QR codes. There are rampant phishing attempts that work fairly well because they trick people into accepting invite to some discord server. Once you are in it then you are presented with a "anti-spam/anti-bot" verification check which asks you to scan and confirm a QR code. Little do majority of people know is that it is a login QR code and once you scan that then the hackers will just take over your account in less than a second as all this stuff is easily automated already.

Re: Discord runs Powershell on load to find Nvidia binaries

#16
Not condoning the method, but I can take a good guess as to what they're doing: They're trying to find out how many NVENC streams are in use on the card / whether any are free

Which isn't important for general use but is relevant if you're screen sharing/streaming your display

Re: Discord runs Powershell on load to find Nvidia binaries

#17
post #2

The linked tweet says nothing about Nvidia binaries, how was that determined?

It's below on the thread, see: https://threadreaderapp.com/thread/1824872498363523537.html Honesty I wished every HN post linking to Twitter was just changed to a threadreader link because otherwise only registered Twitter users can see the content being posted.

I agree a million times. Specially because if you aren't seeing things happen live or semi-live (couple days of delay) there's a huge risk the entire thing will be gone when you go check it out (or have it flooded with memes, drama and general nonsense making it a headache to parse the relevant bits).

Twitter is just really bad for persistent information. In a perfect world we'd have articles filtering the massive noise-to-data ratio and serving as a persistent archive of whatever happened in there.

Re: Discord runs Powershell on load to find Nvidia binaries

#19

For those who don't want to piece together things from twitter, the summary is this: Discord attempts to find nvidia-smi libraries by launching series of powershell scripts. Those scripts are really terrible with a lot of if-else logic based on hardcoded strings and environment variables. They are also apparently fairly slow and scan over 800 directories. Honestly, this is just yet another example of Discord not real…

Can you explain more about this QR code scam?

Re: Discord runs Powershell on load to find Nvidia binaries

#20
post #13

This is why I run everything possible in the browser. Discord, teams, zoom, outlook, etc. It also makes switching computers and operating systems a breeze. Not that I switch often, but I like to remain platform agnostic.

Browsers are a platform too
Post reply on HN