Always consider what you say on Discord as potentially public, since there is no E2EE.
this post was submitted on 03 Jun 2024
33 points (100.0% liked)
Privacy
789 readers
43 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Discord works hard not to private
Depends a lot on your threat model, of course, but here's what I do:
- use a temporary (but recoverable) email
- use smspool or similar to verify my phone for less than a dollar
- run Discord in a hardened Firefox profile (hardened browser settings + uBlock)
- turn everything relevant off in Discord settings just in case
- don't share PII in conversation
- use a VPN (or Tor)
Using a hardened browser and not giving them your real phone are likely the most effective steps, everything else is either less relevant or overkill. As I said, depends a lot on your threat model and on your requirements (some things may be unachievable if you're forced to use Discord by your employer, for example).
Good advice, but I can imagine that for using Tor they would ban. Or do you use it that way?
I've found that being consistent with what you choose to share is the most difficult thing. Conversations can get personal, and as you get closer to those random nicknames there's the constant urge to share mundane stuff about your daily lives like weather, holidays, and such that will all add up.
Yeah I feel you. It's often hard to be fully alert of what you're sharing all the time. I have slip ups but it's usually fine, I'm only mega careful regarding things that could give away the city/town/village I live in, and where I work. If I ever really want to talk about it, I will use a different (often temporary) alias.
Use vencord, which bundles OpenAsar, which disables the built-in tracking from the app.
Is Vencord superior to Discord in the web browser?
EDIT: Never mind; it has browser extensions! https://vencord.dev/download/
You forgot the VPN.
In that situation, I would also:
- Only use it through a browser (with fingerprinting protection), never a Discord app.
- Dedicate a browser installation, or at least a user profile, to Discord.
- Only use it over a VPN connection dedicated to Discord, or Tor if it's allowed.
- Have an alternative channel (maybe Matrix?) ready and waiting for contacts who might be willing to switch.
When I tested it, VPN do work after sms verification. Tor nodes, however, resulted in all my test accounts being banned.
No way when this https://lifehacker.com/tech/discord-data-sold-to-ai-and-law-enforcement and this https://spy.pet/ exist
Use any matrix client unstead.
The biggest issue IMO is the random phone-walling. Eventually, all the things you try to do to increase privacy will just cause Discord to force your account into phone verification. This happened to me many times. It's now to the point where I cannot even sign up for discord whatsoever because it immediately transitions from the logged in screen to "something suspicious going on" and forces you to give out a personal mobile number, which I refuse.
Yeah, they have upped their "paranoia" quite a bit in the past couple of years. A while back, I discovered smspool.net while trying to register for Claude (wanted to give it a shot, was disappointed) and was so satisfied by their interface and prices I've used it again in 3 other occasions. There may be other similar services out there, you should give one a try next time Discord prompts you for a number.
thanks for the recommendation, but unfortunately due to my privacy settings, most cloudflare sites do not work, I just get endless "are you human" prompts that never go away.
Plus any site that uses crimeflare isn't private anyway because they can MITM all your traffic including credit card info etc.
If you're on Tor, that's the very unfortunate reality atm. If you're on a VPN, you may try switching providers or servers inside the same provider. I can recommend Mullvad, which works very well, even if you get some CAPTCHAs.
Neither, it happens because my browser settings make it more difficult for them to fingerprint me which makes it think I'm a bot or something untrustworthy.
Interesting, my Discord profile is also very hardened, and while it prompts me for confirmation, it's always doable in a moment
I'll give you the most extreme solutions I can think of, and let you decide how much of each you want to enact.
First and foremost: use a secure and privacy friendly OS—Qubes on a burner pc or GrapheneOS on a burner phone—with secure and privacy-friendly networking—use DNS-over-HTTPS, or self-host as much of the infrastructure as you can, consider a VPN, keep the device on an isolated VLAN—use a secure/private web browser like LibreWolf.
General rules of online interaction apply for maintaining privacy within the servers: e.g. don't talk specifics about your location, your age, your physical appearance, your childhood, your employer, etc.
As with most modern apps, the web app is necessarily less intrusive than the installable binary. Use the web app when you can, and limit your usage to only when you can use the web app on a computer and network you own—privacy enforcing habits are more important than all the software stopgaps in the world.
If you absolutely must use a binary, consider breaking Discord's TOS and using a modified front-end: I know some people who use Aliucord for Android, and I just this moment learned about GoofCord for desktop
don't install/run any software without verifying the integrity of the developers/distributors and binaries yourself, or building from source and verifying the code
It's better to have Discord stealing your browsing data to sell you shit than have some random github malware rootkitting your phone.
Did you sign up with a VPN turned on? Are you always using a VPN and private DNS? You could also use a voice changer.
You can use Armcord or other Discord client which is for sure better than the offical.