14
The Double Counter Hack Exposed a Privacy Nightmare (www.youtube.com)
submitted 6 days ago by to c/privacy@lemmy.world
4 comments fedilink hide all child comments
 

A 43 min video by No Text To Speech about a recent breach that exposes the kind of data that Double Counter retains, shares, and sells.

Video Description:

The Discord verification bot Double Counter just got hacked, and it's a privacy nightmare for the hackers, for anybody that used Double Counter, and even a nightmare for Double Counter itself.

That's because the hackers claim that Double Counter never deleted your data. And with tons of people deleting their data because of Doogle, Double Counter's alt searching system, this is obviously a problem I needed to dive into.

And after getting access to the data.... it's bad brother.

all 4 comments

sorted by: hot top controversial new old
[–] 4 points 6 days ago (3 children)

Can someone explain what this is? It sounds like it could be of possible wide interest for privacy people, including those of us who don't use Discord.

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] [S] 3 points 6 days ago (2 children)

    Basically one of the companies that runs a Discord bot was hacked.

    This company uses their bots on various Discord servers to log who you are and try to prevent alt accounts from joining the same server (probably to help enforce any bans).

    It shouldn't affect anyone who doesn't have a Discord account, and even those with discord accounts would only be affected if they were in a server that had this bot.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 6 days ago (1 child)

    So these bots somehow had the personal info of Discord users and then got breached? Ugh. Were they getting this info with Discord's cooperation? Reminds me not to use Discord. I wouldn't have forgotten anyway though. Thanks.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] [S] 4 points 6 days ago

    Usually, for servers using bots like this, they make it a requirement that you need to verify your account with the bot before you can access all channels. During the verification process the bot requests your personal info from Discord. A warning/prompt appears confirming that you want to share the info and then discord sends them whatever they're asking for. In this case it was your IP address, your name, email, address based on billing info, etc.

  • permalink
  • fedilink
  • source
  • parent