Pomelo massban incident: Difference between revisions
Mantikafasi (talk | contribs) (add pomelo incident) |
(fix wording) |
||
| (2 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
== Incident == | == Incident == | ||
On Tuesday, 9 May 2023, | On Tuesday, 9 May 2023, several Discord users were simultaneously banned. Users who were banned lost access to their accounts and were unable to log back in. Shortly after the incident, a [https://www.reddit.com/r/discordapp/comments/13d01h7/anyone_elses_account_randomly_disabled/ Reddit post] was created on the r/discord subreddit. Discord staff u/coral-discord informed people that they were investigating the situation and asked affected users for their usernames. Within hours, the issue was resolved, and affected users were able to log back into their accounts after resetting their passwords. | ||
== Reason == | == Reason == | ||
Although the | Although the real reason is not known, community members theorized that it was related to Discord's new usernames (Pomelo). This change removed discriminators from usernames, making all usernames globally unique. As the feature was slowly being rolled out, some users wanted to check if their usernames had been taken. To do this, they made an HTTP request to the Discord Pomelo endpoint. However, they likely failed to add all the necessary HTTP headers for that endpoint, which would've triggered antispam and flagged their account for suspicious behavior. | ||
[[Category:Drama & Incidents]] | |||
Latest revision as of 15:56, 22 August 2025
Incident
On Tuesday, 9 May 2023, several Discord users were simultaneously banned. Users who were banned lost access to their accounts and were unable to log back in. Shortly after the incident, a Reddit post was created on the r/discord subreddit. Discord staff u/coral-discord informed people that they were investigating the situation and asked affected users for their usernames. Within hours, the issue was resolved, and affected users were able to log back into their accounts after resetting their passwords.
Reason
Although the real reason is not known, community members theorized that it was related to Discord's new usernames (Pomelo). This change removed discriminators from usernames, making all usernames globally unique. As the feature was slowly being rolled out, some users wanted to check if their usernames had been taken. To do this, they made an HTTP request to the Discord Pomelo endpoint. However, they likely failed to add all the necessary HTTP headers for that endpoint, which would've triggered antispam and flagged their account for suspicious behavior.