Aliucord EncryptDMs Incident: Difference between revisions
(Moved to category) Tags: Mobile edit Mobile web edit Advanced mobile edit |
m (Mantika so dum that he can't spell) Tags: Mobile edit Mobile web edit |
||
| Line 1: | Line 1: | ||
==Plugin Release== | ==Plugin Release== | ||
EncryptDMs is | EncryptDMs is an Aliucord plugin made by [[User:Mantikafasi]] on 26 November 2021. | ||
The plugin's primary goal was to make Discord DMs end-to-end encrypted, being sure that neither Discord nor anyone without the encryption keys could read the contents of the DMs. | The plugin's primary goal was to make Discord DMs end-to-end encrypted, being sure that neither Discord nor anyone without the encryption keys could read the contents of the DMs. | ||
==The Incident== | ==The Incident== | ||
After [[User:Mantikafasi]] pushed the first changes, even | After [[User:Mantikafasi]] pushed the first changes, even though he didn't release the plugin, some individuals have acquired it through a GitHub repo with PluginDownloader. | ||
For context those individuals had zero idea what they were doing. | For context, those individuals had zero idea what they were doing. | ||
[[File:EncryptDMs User Getting Banned.png|thumb|EncryptDMs user getting banned for spam]] | [[File:EncryptDMs User Getting Banned.png|thumb|EncryptDMs user getting banned for spam]] | ||
Because plugin was not finished it was | Because the plugin was not finished, it was automatically doing the exchange process as soon as some other person sent their public key, so whenever somebody shared their public key on a discord server all other people who had the plugin would automatically respond with their public key. | ||
[[File:Vendicated getting confused.png|thumb|Vendicated getting confused when plugin sends public key all by itself]] | [[File:Vendicated getting confused.png|thumb|Vendicated getting confused when plugin sends public key all by itself]] | ||
Revision as of 19:45, 22 April 2024
Plugin Release
EncryptDMs is an Aliucord plugin made by User:Mantikafasi on 26 November 2021.
The plugin's primary goal was to make Discord DMs end-to-end encrypted, being sure that neither Discord nor anyone without the encryption keys could read the contents of the DMs.
The Incident
After User:Mantikafasi pushed the first changes, even though he didn't release the plugin, some individuals have acquired it through a GitHub repo with PluginDownloader.
For context, those individuals had zero idea what they were doing.
Because the plugin was not finished, it was automatically doing the exchange process as soon as some other person sent their public key, so whenever somebody shared their public key on a discord server all other people who had the plugin would automatically respond with their public key.
Results
After several incidents "<ewd:publickey" word got banned from Aliucord server, and User:Mantikafasi pushed a update which removed entire functionality of the plugin.