[flagged]
Discord runs Powershell on load to find Nvidia binaries
11–20 of 57 posts
Re: Discord runs Powershell on load to find Nvidia binaries
#12From: https://x.com/da_wamwoowam/status/1824874909572665735
`readdirSync`, `statSync` are from https://nodejs.org/api/fs.html
Re: Discord runs Powershell on load to find Nvidia binaries
#13Re: Discord runs Powershell on load to find Nvidia binaries
#14Discord attempts to find nvidia-smi libraries by launching series of powershell scripts. Those scripts are really terrible with a lot of if-else logic based on hardcoded strings and environment variables. They are also apparently fairly slow and scan over 800 directories.
Honestly, this is just yet another example of Discord not really developing their software well security-wise.
Another example bad security example: 2FA implementation is not really that secure since you can continuously ask for backup codes to be sent to your email which you presumably open frequently on the same PC (there is already automated malware that will abuse this and circumvent your 2FA via newly generated backup codes).
Yet another terrible implementation: QR codes. There are rampant phishing attempts that work fairly well because they trick people into accepting invite to some discord server. Once you are in it then you are presented with a "anti-spam/anti-bot" verification check which asks you to scan and confirm a QR code. Little do majority of people know is that it is a login QR code and once you scan that then the hackers will just take over your account in less than a second as all this stuff is easily automated already.
Re: Discord runs Powershell on load to find Nvidia binaries
#15[flagged]
Re: Discord runs Powershell on load to find Nvidia binaries
#16Which isn't important for general use but is relevant if you're screen sharing/streaming your display
Re: Discord runs Powershell on load to find Nvidia binaries
#17The linked tweet says nothing about Nvidia binaries, how was that determined?
It's below on the thread, see: https://threadreaderapp.com/thread/1824872498363523537.html Honesty I wished every HN post linking to Twitter was just changed to a threadreader link because otherwise only registered Twitter users can see the content being posted.
Twitter is just really bad for persistent information. In a perfect world we'd have articles filtering the massive noise-to-data ratio and serving as a persistent archive of whatever happened in there.
Re: Discord runs Powershell on load to find Nvidia binaries
#18Re: Discord runs Powershell on load to find Nvidia binaries
#19For those who don't want to piece together things from twitter, the summary is this: Discord attempts to find nvidia-smi libraries by launching series of powershell scripts. Those scripts are really terrible with a lot of if-else logic based on hardcoded strings and environment variables. They are also apparently fairly slow and scan over 800 directories. Honestly, this is just yet another example of Discord not real…
Re: Discord runs Powershell on load to find Nvidia binaries
#20This is why I run everything possible in the browser. Discord, teams, zoom, outlook, etc. It also makes switching computers and operating systems a breeze. Not that I switch often, but I like to remain platform agnostic.