21–30 of 57 posts
The linked tweet says nothing about Nvidia binaries, how was that determined?
It's below on the thread, see: https://threadreaderapp.com/thread/1824872498363523537.html Honesty I wished every HN post linking to Twitter was just changed to a threadreader link because otherwise only registered Twitter users can see the content being posted.
For those who don't want to piece together things from twitter, the summary is this: Discord attempts to find nvidia-smi libraries by launching series of powershell scripts. Those scripts are really terrible with a lot of if-else logic based on hardcoded strings and environment variables. They are also apparently fairly slow and scan over 800 directories. Honestly, this is just yet another example of Discord not real…
Can you explain more about this QR code scam?
For those who don't want to piece together things from twitter, the summary is this: Discord attempts to find nvidia-smi libraries by launching series of powershell scripts. Those scripts are really terrible with a lot of if-else logic based on hardcoded strings and environment variables. They are also apparently fairly slow and scan over 800 directories. Honestly, this is just yet another example of Discord not real…
Can you explain more about this QR code scam?
On the login page of the web version of Discord, you have the option to log in in two ways: either by using a username/password combination, or by scanning a QR code with the Discord app on your mobile.
The QR code is linked to your desktop session, and scanning the QR code with a mobile device will cause Discord to authenticate the desktop session with the credentials stored on the mobile.
Thus, if the attackers take one of the QR codes from their own desktop session and give it to you, scanning it will authenticate their desktop session with your credentials.
The QR codes have a rotating code that's meant to prevent old QR codes from being used, but that only means that the attackers just need to re-request the QR code every so often and show the new one.
This is why I run everything possible in the browser. Discord, teams, zoom, outlook, etc. It also makes switching computers and operating systems a breeze. Not that I switch often, but I like to remain platform agnostic.
Browsers are a platform too
https://nitter.poast.org/da_wamwoowam/status/182487490957266...
How about some fucking empathy? Yes, maybe the dev isn't a windows expert, but I'd guess most devs aren't. Most people don't have the luxury of pulling in a specialist to do every little feature, nor the luxury to do a deep dive to figure the absolute correct way. Such is the reality of (commercial) software development. I don't think we need to have snarky attacks on the front page of HN for that.
Earlier quoted context omitted.
>I am here for good faith arguments, not just to poke at people.
[flagged]
Did you type this wrongly? Closing the app is a normal Windows behaviour for both Alt-F4 and clicking the X.
[edit: Parent edited their comment to say the correct thing - this comment doesn't apply any longer!]
For those who don't want to piece together things from twitter, the summary is this: Discord attempts to find nvidia-smi libraries by launching series of powershell scripts. Those scripts are really terrible with a lot of if-else logic based on hardcoded strings and environment variables. They are also apparently fairly slow and scan over 800 directories. Honestly, this is just yet another example of Discord not real…
Earlier quoted context omitted.
It's below on the thread, see: https://threadreaderapp.com/thread/1824872498363523537.html Honesty I wished every HN post linking to Twitter was just changed to a threadreader link because otherwise only registered Twitter users can see the content being posted.
Couldn't that kill threadreaderapps bandwidth?