Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Let's Reverse Engineer Discord

medium.com

Post reply on HN
Print view View original

61–70 of 115 posts

Re: Let's Reverse Engineer Discord

#61

Post by csunbird »

jokoon wrote: post #54

Wasn't skype originally P2P? I wish there was a simple windows voip client that was doing p2p voip. I often experience cuts with skype and discord, I think their servers can have a hard time handling low latency properly.

It was and because of that a lot of people were hacked, since skype could be used to run remote code by leveraging a couple of bugs existed in skype application.

That is one of two reasons why Microsoft switched to server-client model instead of p2p connection.

Other being having control of the service and with call and message history makes more money of course.

Re: Let's Reverse Engineer Discord

#62

Post by ryanlol »

coenhyde wrote: post #14

I don't think Discord makes any claims that the audio is P2P encrypted. There are legitimate reasons why Discord might be dropping malformed packets, apart from an indication that they are spying on you (they may be doing that too). 1) to improve audio quality. 2) to help prevent RCE attacks on the destination client. 3) re-encoding at lower bitrates for low bandwidth clients. I don't really see the issue here unless…

Discord specifically stated that they will not implement e2ee so they can continue to spy on their users, because “Think of the children!”

https://www.reddit.com/r/discordapp/comments/8nzb5d/why_is_d...

Re: Let's Reverse Engineer Discord

#64

Post by uncle_j »

duskwuff wrote: post #41
mapcars wrote: post #39

Earlier quoted context omitted.

Is discord known to be used in corporate sector? I think so far it's dominated by Slack and Discord is mostly used by games/communities.

I'm sure there are some businesses using Discord, but they aren't the target audience. The branding and feature set of Discord all make it very clear that it's targeted at PC gamers.

There are a lot of smaller open source projects that are using Discord instead of IRC. I am a member of Reshade, C# OpenTK and general programming servers.

Re: Let's Reverse Engineer Discord

#65

Post by rasz »

coenhyde wrote: post #14

I don't think Discord makes any claims that the audio is P2P encrypted. There are legitimate reasons why Discord might be dropping malformed packets, apart from an indication that they are spying on you (they may be doing that too). 1) to improve audio quality. 2) to help prevent RCE attacks on the destination client. 3) re-encoding at lower bitrates for low bandwidth clients. I don't really see the issue here unless…

3 is tens of megahertz of one CPU core per re-encode, clearly out of the question with todays norm being ~ 4GHz 8 core CPUs, that or they are spyi^^^ recording everything for 'metrics/analytics'.

Re: Let's Reverse Engineer Discord

#66

Post by jafingi »

coenhyde wrote: post #14

I don't think Discord makes any claims that the audio is P2P encrypted. There are legitimate reasons why Discord might be dropping malformed packets, apart from an indication that they are spying on you (they may be doing that too). 1) to improve audio quality. 2) to help prevent RCE attacks on the destination client. 3) re-encoding at lower bitrates for low bandwidth clients. I don't really see the issue here unless…

4) Maybe they are doing remuxing when multiple clients are on the same chat? Would definitely lower bandwidth.

Re: Let's Reverse Engineer Discord

#67

Post by ackshually »

nightfly wrote: post #8
senectus1 wrote: post #4

Earlier quoted context omitted.

fuck. Is it really too much to ask for/expect a modicum of decency with these services?

When you are paying $0.00 for the service? And in this case they are dropping malformed data, which could easily protect their users from malware that exploits weaknesses in the media codecs.

It's not a free service if the service provider is selling personal data.

Re: Let's Reverse Engineer Discord

#69

Post by 867-5309 »

they pretty much claim ownership for anything and everything you submit to them. they need it in some useable format, which "encrypted" is not. what they use their data for is not our concern, since we no longer own it

from their ToS:

"Any data, text, graphics, photographs and their selection and arrangement, and any other materials uploaded to the Service by you is “Your Content.”"

"By uploading, distributing, transmitting or otherwise using Your Content with the Service, you grant to us a perpetual, nonexclusive, transferable, royalty-free, sublicensable, and worldwide license to use, host, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, perform, and display Your Content in connection with operating and providing the Service"

Re: Let's Reverse Engineer Discord

#70

Post by tyingq »

coenhyde wrote: post #14

I don't think Discord makes any claims that the audio is P2P encrypted. There are legitimate reasons why Discord might be dropping malformed packets, apart from an indication that they are spying on you (they may be doing that too). 1) to improve audio quality. 2) to help prevent RCE attacks on the destination client. 3) re-encoding at lower bitrates for low bandwidth clients. I don't really see the issue here unless…

There's this: https://twitter.com/discordapp/status/857339272231309312
Post reply on HN